Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-nightwatch-version-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b9600d2636bc95e4fb53ee60cb488216bbf604e52ea23b2782587e7ec43f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-weywot-xenon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9067243135c3a1d2c24a2e061e3cf70ce446a10f71d45011eea83ff5d197ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-fork-postgres-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55b74dedb1f55e866a3e57ff1b1150151ebfce27b4a2d1e0fa1033db37c196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148881 Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149074 Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143716 Malicious code in iota-configstore-sirius-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89652821e865f568b1d8439feedbf080785e427885c6c6dd0d0cf76b0115d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142781 Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-init-apollo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2421d0af6b38ba2ed5dbe7b3622fe8083344c0337a52128c9a27540b87483f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-auth0-dione-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8daa66d3ad3bc016afc3ec7e198370914aeb3104fbc6b0d6d953e52ed5be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-transport-antares-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dd5e963ca95be4d275776c26fe8bbf0e69bad83e16e6477c525e3b11082bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-sedna-warp-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d0842818438af83f0519e876651c3e0121da7de96046c41983e1a7a8bb173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-local-lint-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1252175578f0b4e994a71fcbd5f3ba442903b902ccc88eef60da0b74d7c8b434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-proxima-capella-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c4e4e6eafea389b8886de6367219c50aafba5925e89c98723c039c522076e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...