Malicious code in socketio-rollup-plugin-vuetify-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-ultra-janus-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5605f667666e11bca911604813e36388a35c57160db80af8971a97b27fb35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-react-bootstrap-alphard-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef56b0ef3dafcd5ccda1c3a84f46599c6a14f713e9f7bae15254699346723ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141584 Malicious code in dependencies-sequelize-titan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09049d1fe55b090643d923e84f8ce0326ae4a3c84a661975aa03b0a5573a0cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143176 Malicious code in hapi-betelgeuse-elektra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cac274f03345eff3a6a95ef1daebb33b6da23343c6402e2c78753db54db027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143673 Malicious code in install-cross-env-ultra-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa47a9926aa5a2cd8c02951576f63f7e8c9b89a70c08db2c802d7b38b367d259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144786 Malicious code in meissa-achernar-betelgeuse-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4877db2ed8b3a12adcd2fcfb33130f202ce33e00f7138d0c8016693af1e6256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148153 Malicious code in spica-carpo-event-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c2b56519d783da3ccc64e57653e3880074db5bec7a185adf0c14cde83acb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141791 Malicious code in draco-cosmos-restart-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd876bcb4ef1111bfcc1273681247b5e97e52ba912fa39284cfd0f37f70ddf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149586 Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149389 Malicious code in webpack-bootes-ariel-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8573a4b37c663972062823103ba7285feb49c796b8152c9679f300960422cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145665 Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142292 Malicious code in europa-sirius-graphql-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6971d451ff8d1c3fc0af0584771bfdb33116e859b78003c35c64a5b7404fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139595 Malicious code in ariel-postgres-ariel-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52581d417bf9190a23944e8bbf136ab50f5700f8a2f7caf39cf0c15bc94043ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-centauri-subscription-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8358fbb12d3db96e025bbe6eda5a0ccc017c35f9a7f8dfc51a6dce33f9cd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138938 Malicious code in precise-lime-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139091 Malicious code in upset-teal-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9aed683c061efa23bac6961d116e752c5c30b9db88780b1407b374afcc64d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...