Malicious code in canopus-config-karma-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-hugo-vulcan-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22669f1738276fcf0d0861f934453f7eac47379e02ba69f509ffde9eade5eed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-levels-terser-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0119e00e1c8dc62089028a6be74894353bf9c1eabc5460e57721cdaa4ce24bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139180 Malicious code in acamar-npm-fusion-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d95af17c88ec72811f0222e34d822483f1989fc44ddbded8ed3780ef28b976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-charon-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132a3282516277f108b9368592cbb4dd3d3cce3637e6c9b4103a34bade58c83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-element-ui-sqlite-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e5be9b47f6694968a9eac77b11714a83793a8bb7e1fe43a9dea6c317f0e651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-quasar-gridsome-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf553b747a0fd06cff0c865d887c89b2f7bb1b22df3817b395eecf387d96b958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148157 Malicious code in spica-convict-got-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261b1cb8052913262bc8815e670f43ee36c2614297a654421d573ac65aecfe7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147037 Malicious code in rate-limiter-europa-pino-pretty-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee11da6aa21c1eee394751ea6ef9bfc6013fcc34a6a9479d9cb23c891837a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139910 Malicious code in barnard-kastra-carina-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a9b9022db9904dea51faa330c3c795af208d00d11dfce04befa8c3d077b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147476 Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148190 Malicious code in spinner-dagda-xml-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0290c84ba80b9e759f0e940702c39f74b6b346365cbb80b29af041a06932ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148673 Malicious code in titan-centauri-less-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957fc566741844af0c99ff38cbca3b500d39ae7fff7e88fafd0d84fa24ea5a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149416 Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146894 Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd635838c8a3e29ed758fb816df1aae5113f58d4136c3bc38d13731170c1aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148559 Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd843ac6dced51f98acdcc930c20f0cad711abc9b239c360b831e0741fb4a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142961 Malicious code in google-inquirer-hapi-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7be58eb29f37467c3b6cb8c68a63f2c4c96a8058f7dfe17628c5e644ec52db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141719 Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...