Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-deimos-vulcan-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87885cf83feab2e1c3534b6740d4189ecd601dc4c2079ff35d4a4da7bf0a1b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-commitizen-vega-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6681488f2f6863e00ad9ecfaeb147850e462a4e95077c0e213b618430038ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139451 Malicious code in antares-xerxes-elektra-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d475342fd46e1b5411c65070ae1c4bddd5372c66609e943409a0f8c8c40477b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144914 Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147051 Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148105 Malicious code in spawn-registry-hapi-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce6c4931686578ab6925d8495679d37db70997bb5117ee12b15a35a4b0af5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142873 Malicious code in geckodriver-markdownlint-websockets-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20cbf16548e1f3820842251aa3cb4b9c86abf2d55d1caa35218317b5fae029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145603 Malicious code in non-blocking-auriga-inquirer-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316359bb885ba6987c0b0f397ef7bf1642c823b88557edd8f9928acd8596cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149396 Malicious code in webpack-eridanus-iota-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa2b88d2e7d66ee39513bfc1364e086fda5473dc9a5bdf8acb712cfd322ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145185 Malicious code in morgan-npm-json-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6227a0b3c341629947c4a37ce5ccad00a50c262a5b562a1b31f31a10d524656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139716 Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148166 Malicious code in spica-lint-solis-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0bc74a9bf11f5ae9f2d2951d34d018a956cf3d25f4ddd5b84f47c2335f0a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147985 Malicious code in slides-geckodriver-sass-loader-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffb3b79f8518cf9c8eb783d487fbeab6cbe1a3006f9b7dfe4811dbf438c53aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-promise-rigel-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9c0d0c1484d3987510685503adf6ec928ec165b2a22fa28c792c09a33310ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-rollup-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481b7faa3c35341d66a7cb67ad739c59a56229bc971c291345496b56f4668ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-meteor-pipe-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17253d0738b27dbf70dd54f4a14d25e78c49e7c9045b8cd3a1eaab054173f5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...