Malicious code in dotenv-winston-yakutsk-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f6ea4e6b0a8701922666979f8e779420a41717c0e1c8ecd5813d041422f043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-electron-blitz-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8904c00009f7e78edc3add02b97ce60da1c69ccba3ca365bda498e0e7618d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-janus-commitizen-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5c0a3964cbb5df915e60a77fb981005314339b39767d8b59181c63a6791732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-graphql-karma-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e9a908918c17295eb6de0cfed1b30c7eee75824920f01b7ad4af1164f6d62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148220 Malicious code in sqlite-ariel-spawn-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345720f3836c37e579e5b4f65b8f3644211d05a83b66beeb0d435273f944b5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-sadr-venus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5820b02f0067ae5b03cd0c76651fda8b7b47018dcf73f12959a8d003d8a8622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139961 Malicious code in bellatrix-upgrade-janus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42ba641fb995fa9c020ea3091b0a83eb23c4da82f4514246b7213bba84c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-module-redis-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89691332cc57ba458b0a199b96cbc4a71d7e11eb6e09e49948831c472f63dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-ophiuchus-supervisor-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d161a75cd81a68198bf33a6437867de29c56abdc2d8d0f24e783ec8aa5a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-update-aldebaran-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6562c9a297aec145961edadff808bdcf3d80ab9e1188cfbb9a65529b2b98b1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147826 Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143047 Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141550 Malicious code in deneb-morgan-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784163d0e2a8265aa80028b5501e309ce377ceee5e7e44bb1fdc98e8985cfeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146864 Malicious code in puppeteer-sequelize-link-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d360f07a2225871e32929218ff89e68144d850e41759c5c8675232cd34d9e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...