Malicious code in modirai-igamino-jiaamagugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d57de4a6b0ed27d7c45848d8b69b7755467cd1e753ddc94090267fd8f3aff5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-cli-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e24b115a829d16b3956d1bc125c8001900849f9d2adfba59701f7f3a09299ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-adonis-uglify-js-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5cb08f98cfd9f561dfa229fd37bd0e78a5cbe13e7531b6678bb6e10115ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-eridanus-meteor-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d5458991ba5af8efcdb9f9d1f0f9dea519d513cecd4f39660b9ba393f83b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-scripts-pavo-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af91ed45de35900826f52a7cb975f1ac7e45eb80f54d11c170cb3527f026791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-achernar-orbit-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe54136bb4a52990e8312c33b50c21425820079da86e6f1e7038ca5e0cad3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-bellatrix-firebase-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b752ffb2acce4c9001188ca2eabe54ec54f0e1d4c39be203e5b4cb7260b9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-chariklo-odin-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c2d50e67cbc5f2bb004a64214b90e5ef969a05f10b98fa932df4236c8f8ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141423 Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9525cff2d4f497c1e161782ad3e5478832085c188b7182639221632cc9fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147221 Malicious code in release-it-convict-io-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff837e9f66bdce73e63e136801ec54bd54f71d91562f3848829ef721900b433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-virgo-neptune-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74955c1944f7289abb9767df8625bff89308a3ba20a2ce78410c61dc25ad03ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142745 Malicious code in fusion-redis-transform-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca2f562084596430846a1d0703e28b8df04abe7055c8146527b1a06f37419e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142527 Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...