Malicious code in less-loader-toml-private-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b8201962b4d3aea7518648553d817621cb4351fa1743b801b30d6659b7352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-xo-concurrently-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd92af27014b5e0dbf1da31c636abf1d7e77a763f716e5439bda1534aafef88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140091 Malicious code in bootes-sagitta-sync-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabe567e2577ba63382ca72deebc073ffa5a371f353d2b9acd08110c967f6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144493 Malicious code in local-phoebe-ophiuchus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35c8992fa4656e9b023b1da0ebd331ecfa929abfe74cfb01985916ba08edcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145065 Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-dagda-electron-builder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432e6d6f4732176d1bb27e4248a3a9d354d57b424590358f70ac658dd3b40a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143569 Malicious code in indus-mini-css-extract-plugin-mysql-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a86d37654c305f1ca7d6d2332f990117367cfff2ea43380f8079134bdd6b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140956 Malicious code in commitlint-config-angular-apollo-sequelize-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c3f23943a372761b3922807be26f6d0d6aa6f29d881e122916b5201148a69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140499 Malicious code in castor-xo-process-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7e9ee758d3225c0ac906b5d2c0af7eafe128a6688181ebd5cc15facb09c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142723 Malicious code in fusion-barnard-vortex-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc006a1619b4883238ee51f3a4e4ac2d1b8e1e5c6068d0f991ce840da14dafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-ganymede-prettier-plugin-markdown-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbf03b50094cb4b2dabfc1f9cb2b12fc987c7c284d4239709d51ec7e88df419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-eslint-plugin-hapi-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130b5389646555fa44a99b1c80554506f5c28249e9c60be6b4adaa5e09e1d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144491 Malicious code in local-odin-sync-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eaad6abfc7da0b2db8e0aa9cb3812e19c577a9687e15a1f993dc96e8488b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-lyra-ganymede-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6181a01a81a8c552364326cd66c46972737bab6c3ec6343db604561f155826d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...