Malicious code in dependencies-changelog-cosmiconfig-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-readable-betelgeuse-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae0e6f8a06367e95d49b65de1d5493df1d604d1155ae3b584b2a93917b4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-chariklo-webpack-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f539904b019a9a6927140559d0a40efa04b8065a579e3438207e57294f5c867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-pulsar-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b327e52f664fb61e48d3edd94b434fa2f0dbd2c57b366f139b56e6d51e5794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-venus-fetch-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c734b28d4aee59abf5e705cf6d757d1ba1faa5d4ae58881d3cdddfb0b0d70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-mui-nashira-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfbe44374806e35c00fedff0ebd9b6fc637bf9c75b8e9ac317ad72610784140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149210 Malicious code in vuetify-fornax-equinox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5529f7735a79897751ccb1ec6b14b80cd2211f4385b705aa95822ea96af2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146054 Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140751 Malicious code in child-process-metalsmith-sadr-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648b1d5ebad02068378ea6e0e761e2874183d1ea7650bde36d994a2781348832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143280 Malicious code in hercules-electron-builder-testcafe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650e1e45c6b0ae8b1cc5389d03c6b74a2449cef944439b01c8b49099f775ddc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148783 Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-apollo-xanadu-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2454fb08bff143bdb22e629949a840c5de75841dc857d9fa4fe7a85ba4c4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-prompts-meteor-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab93fab7c2840eeb9d78277dc25dc871270bad87bf27cccf35509e1ccf9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...