Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-bunyan-xo-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edbc209cd1ba1cab6f49ce0e8c5c7ce4cd297e85ac19b2bfff0c1c77377034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-achernar-fork-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b8f8c34cd0569e980d0406ca537a6f31f0966e068ac568d2797b35fc517fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-callback-venus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54afa4fcb2836ea95ffb5db003dc4c6f9a022be7b0b74462aacc150cf13c0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-procyon-impulse-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc2d52c81a763224f849df35a4f33a41297e9a714ef5b1fd7fcd69cbd8728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-jsonp-build-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c952c1fa34bfc6b5000796239edef4fc37cdec5ac23e9f43e9415eb5d6ec65cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-event-husky-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d106946017d4e4f863622b3e6fabb769bf7517907828720446c9f69f07e589a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-babel-sagitta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280ac52a25aeeb1b2e6c9f3a4a230c3844f59f27bfdf1b084f24285bbc370d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-superagent-altair-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcf6a2492e6e844fa212aad4b5f153914bfbef29058a1a1fbfc033f3b2529c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149605 Malicious code in xanadu-package-cygnus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa2d250e72977c2e74b7ab03029d46a6ede791ea7df99c5cb30ab2ffc417dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146202 Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc91661a591ce06363d9a044e03d074a45545f80c73bb0fa7a69204a4a2561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142277 Malicious code in europa-kaus-ini-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b8eddeae826b1fb99b6c944ce28b1eeec45196af20edf767f02e9c7e31ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139832 Malicious code in axios-karma-mensa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410722a9393688cd5d9c27ae34b34821e0521572820fd9dba34e1116e0e430f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139461 Malicious code in antd-meteor-pipe-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17253d0738b27dbf70dd54f4a14d25e78c49e7c9045b8cd3a1eaab054173f5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139623 Malicious code in async-development-jovian-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51464621a81af6bcff023d345004235362af76b61b06c3f4b8d0b27d4975dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143145 Malicious code in halley-hugo-node-config-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18d81c7012eb412f8679db20a766a516042723987121a382c43cbce0300fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141444 Malicious code in dactyl-inquirer-version-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8252b1269cc558b534e0319a0675c490082867e8a797591156fe834d3f1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145306 Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef04650962ef0157fb6aa6203575844103e5030f75aa4db08b3f35fb3d4a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...