Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-nextjs-zephyr-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8344c28a41b99d856235ce4061e3fe1cef579c6bc379248ce3e9a5a886efe76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-aldebaran-hexo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4819b15080774e0af4a0c079224ff1d422220c1817dfaa44d07aab13d0568164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-release-it-altair-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6978aaa136c6001fac1b87f9ef2f0eb076861ebec1150f4c4c776a2255576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-umbriel-enif-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c013602c546a941cd797235368c91bf64594bd013390e347270c00560b5077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-pino-ganymede-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4dd6328527d6a79485918cd6d69b55a14c19020d45678be01530f3fd8b220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-hercules-css-loader-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-shelljs-neptune-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fe6a11e5cb3ab57307b32ce46776f213d03f1af3f4ec2d7a384706424c52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-husky-semantic-ui-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3ccefa54c95c888bb821b615c7d1714b07731f815f4e005a557e282d65e25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149605 Malicious code in xanadu-package-cygnus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa2d250e72977c2e74b7ab03029d46a6ede791ea7df99c5cb30ab2ffc417dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-run-script-norma-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd668333dd4330da852b8a90a702cf0b38e7a8f807dd442277790b997ee2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...