Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6b53e9ec9c7ca4e8ae2677ff0aca09ba263bea30c7f030cd59a350bdb6015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-apollo-phoebe-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7ee377341afd6ff00ecd3c91d8288a5f071acea3140ec89bb507e3ce438771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-phenomic-csrf-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-rest-elektra-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31685f1be57500276d60c7eefb51aac804f95d4aec096a79137159ca4ecd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-cosmos-scripts-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7abf3d475aa8bdb5e299992047446f1bb86e8719bc25a6918e7d6506d40ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-local-readable-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fb489f78786efa57240e5e6d3f8a0bb5a69761aec4f56d5a4ef7508a605233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-terser-element-ui-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4b332cc457db25bf8e8aa2fc3e3adfa7721e1fea397195ddb25fab1ccfa75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148517 Malicious code in terser-eslint-apollo-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abd831119b104609936a6a3bb0b6b7570562aba1fdab4618704795897a51640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143738 Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146254 Malicious code in pino-uglify-js-uninstall-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9e617966f95f14dfc7533b56c77f9f8aead0d58a5ada8990958634402c7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145247 Malicious code in mysql-halley-loop-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297756a4de498d66e54f04ec547723dad2d3c41b72fe87b13eb6442aa05dba9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148776 Malicious code in transform-uninstall-octans-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f86db654307c7cfc379ac92f24a6d4c504fbc65b67b3f390aba1f04cdec2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-eris-wasat-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e21e88e18b9084e7aab61b19c9e629c5c6c8c1340347d39df9bdae2a0de73c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-antares-less-loader-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273c8b125ae3a710862623f732348e71085c0b00cb12696b43074fd6128179d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-flare-warp-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca4cdffbf74fc39997178a3df0ce4e717300bc5fbe041fee70bb2ec0a90113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-taurus-miranda-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aac5ead4efc3c11d82c7f4194496e147b4fe85c3b007b970f904232f39c907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...