Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-public-odin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce472fcd23ac14edaae98c960946771deefffb77efc0bd59c1726b2b080d0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-start-husky-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0712137e87ca31bb76b274c076a97cafc8f641b51e58e58d7f08ac05db42ee91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b575529075e328bff1c8bb906ea7952c1952b5ee9251977bae0c8fdf4f543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-charon-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6847fd56e5f61e5388f977b14d33e5665d8d11a56e30d5bf5db8f882ad91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-transform-prettier-stylelint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d23032fe018322cbbf81c4a145ca9e87e09a57af0a91ea9d04b07a55c09e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-radiant-kastra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7da4a931fc7d11a9f6c84c5f2225ad0970d868b34bbe685c179c1601b593551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146012 Malicious code in pavo-taurus-miranda-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aac5ead4efc3c11d82c7f4194496e147b4fe85c3b007b970f904232f39c907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149629 Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145851 Malicious code in ophiuchus-wasat-winston-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054d64bfdec4b7199f9f5aae28df4399dbf0746e791e2a667fb447fd6b93d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144982 Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7abf768c17dcc0e5b07309564f07f447feb5c1795b58c7d519912d70485516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140752 Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0600f861e5c7c831867f5d513940f33a86c60daf9f02ae87e935468a6bb3d6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139703 Malicious code in aurora-package-concurrently-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcf46e2c00c50b6245feac36e411f6cdf81cc03699455444dac5ec221b5984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146020 Malicious code in pegasus-centauri-dione-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b742451b800a6b6c6ee2cb011daacd235a1ffbe76cd4d01bbc2640ba05c37405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...