Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4c0c782d6c378089168b89d8b9dc2f864bbb057f8c45669d8132fe4c260f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-eris-wasat-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e21e88e18b9084e7aab61b19c9e629c5c6c8c1340347d39df9bdae2a0de73c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-antares-less-loader-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273c8b125ae3a710862623f732348e71085c0b00cb12696b43074fd6128179d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-flare-warp-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca4cdffbf74fc39997178a3df0ce4e717300bc5fbe041fee70bb2ec0a90113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-taurus-miranda-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aac5ead4efc3c11d82c7f4194496e147b4fe85c3b007b970f904232f39c907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144953 Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145326 Malicious code in nconf-procyon-postcss-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62027e42a9ae8ddc26456eb98888942c5bbbf02240aa12170e748cc10717647d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-antd-dione-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba1fa7ad9b95e2d278e65f7fd0570ddd801f915a2455530317272b4893438e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-leda-xenon-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711449061c304954070a6e0690741a6de984afff904bc2f2fe9f6e481fce0a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...