Malicious code in materialize-cache-socketio-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c505c1c3681aabfe81be57a2886297ccbb2901fd0260f10d2ec586bc0c95f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-mysql-typeorm-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35405c74b80b740ff6692a59b7390e4f6533a8de1753a6bc8b734da445044bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-release-it-iota-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef678b480ea8357c3403bc92974a35f3d3162eb978c30eada96539552e2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147617 Malicious code in sagitta-sadr-taurus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723df4b26e2738054b627a285a7cbbeb1598dce50f0dfc002afa5a0d00f5358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147458 Malicious code in rimraf-procyon-eclipse-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7405c03317d1a758117a3161449004a1e8a20b070666ad8dd0696ab586dca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139610 Malicious code in astro-lynx-spectron-webdriver-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9049322941e5324e2a72b89dd2bec6a6c4657ed11046ca9603fb10c28fe22098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140224 Malicious code in bulma-phoebe-zenith-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081a2ffc47999af7e0aae30f3d30a70747df95d6552443550b349698fd6932d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144222 Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143447 Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142346 Malicious code in exec-jekyll-redis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebe6769e033cdb34c98efd5c14365847f4e0ad6fd40b98d87aead05ce274857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tahu31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f88561c71a518edb30ab5edea2ac82b84bcf34d264101914c99917c3d98068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132474 Malicious code in cindy-gulai42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ada8c24dcce20c18216d290a12938a56806212aadc93f191e90583ff127e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125fcb247b9e7a4d01d6747fbc334d1505c9ef5c1ad840ca90c0471b9675ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tapai66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a468ba145d31a1ddf585870c3a9960881951cf3f4157a84d6823d2abf6aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137813 Malicious code in vina-gulai69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b95ba7f7db625ed1c37549d24a9cf09d8c44b8529273635754e389e95160e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...