Malicious code in css-loader-metalsmith-rest-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005841e6161cc0f0146a62615f6eae5c47197caabf44e0ba61f55a86dabe8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-nodejs-umbriel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c976dc4e8caa65dad055cd3ea3b6bd8738c7eb21895548d493f81de4dcd32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-xerxes-parcel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575a8ae56cda8728c11a9bb1f81db900ad4861cb7e1ce24d25010623344981c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93c8482597f34bab21322649a57417242e99b962b98baa32604bfe83455ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-vuetify-websockets-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157398aebd6c7afef671792bfbe7072fe28cb0a167665eb11bb9f03a9a270231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-oauth-blitz-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c729a4cb488df8cae036da08e103306bdad34795f865fc600c0f099b12065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-chromedriver-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c904af5710a1d1c2af77e3315bee7c6b13290ac02f7195ddea52a05a82ff104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-mira-xenon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a07bb677957e70e2e949bba1c9e54ec32c7b5400c60f5cab5c2aa33b223c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085563b1c755c9034436d3a7fc944ed51789e52fd283060c8aa5fcade7727148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145585 Malicious code in nodemon-mongoose-middleware-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2a72b6763ee7187ed22b8843e8393a1e99887cac99bf5d7ff89efb0104d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147451 Malicious code in rimraf-kaus-despina-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149737 Malicious code in xml-triton-flare-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5071a55567cacf1803e3273147a53c48f7b2dcfd1cd59b0a11d38f1d5ff0c452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146112 Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142217 Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147553 Malicious code in run-script-testcafe-leda-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e7dc9ba0f5d47e98f774ea7995d2500ce1213a9d66d48a42b8ca8ae7391b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142541 Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ae1f421c71ebc6177df930c078eef70cfa8aad7575e2f67abdcb3fafb6637d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143809 Malicious code in janus-firebase-mdx-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea3dc71068a9a819c018750ef0b3763afd9a8a07546f9ebd567cb74b9520152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143080 Malicious code in grunt-yaml-testcafe-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dda42b4b0a944d0a92c8e190fcaa32a8da8e62b2df0d5a65453f866118b2c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...