Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-redis-comet-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497bc20d603aaea85b8f83df64e5c610dc51c3976e7be90479ea9df604aa6095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-sedna-scripts-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bdb28f054c1929b029e399dc3d9b390a88b551aaf485363df36d9f37a6da5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-xerxes-phoenix-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa53cdb21883c83010f5b066e9c80d22153325969ee802d62fc3eaa81e6b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-nconf-celeste-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd2e527604d64e34551faa5600bd57cadd35c29ac58e7f998531cbc0c9072c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-europa-remark-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499420da960ee4fe7fe2479f0c22372a570f7973d6202e7667104cd5e5be1889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-triton-query-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fe942855422456b2b094db1bd45bdae5ec15bfecb41962f6257d1a0d834689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141618 Malicious code in development-deimos-commitlint-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8992138e76f1ed0ec9cff5328a1421e94b2128dd4661be7b703858e319735d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148216 Malicious code in spinner-weywot-pegasus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eff7a0d03bdc73a763774092380a479e5d19d89399b9e1657182baf5b718c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143072 Malicious code in grunt-public-yonder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920769a89fcb827d5b2c803bc75e9e94bde3109b923acbc4292bccfb706cb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144914 Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147051 Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149284 Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-winston-xenos-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b65e57c7104e9d7b684f7a4c5f402c844575c8a57bd91d2dd386d718e0ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145185 Malicious code in morgan-npm-json-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6227a0b3c341629947c4a37ce5ccad00a50c262a5b562a1b31f31a10d524656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146221 Malicious code in pino-loop-relay-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414d0d5c89c6babf69a75fd4a13892cba890b3aa412035672d712a9fdcbc9c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-europa-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649df122b61a0fefdc081c4cf8993203d642edd844cd95389b1a9160d88043ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...