Malicious code in @antv/s2-vue (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Malicious code in ablation-semantic-ui-readable-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb999c04b781769ca44990d467de461dd690a88b83be66c974ada6a559b8a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-interface-stub-delta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bea2e8001fba4e0c06b3e79d1b45abbcd43329f409b01df4ddc089f09b4e4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-halley-eclipse-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8ad09c0a08bf031574152a898d8286ae2d35f3ed9cbf41b4a8ecc5cfe5a745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-postgres-gammarayburst-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ecf76f6eed19dc4a932c5fb0c73b1416023f3c5ec20bf64050e727c997de9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accretion-kastra-nightmare-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e97e293861df5ff3ff1aff45ed36a2f258e7725f0c175f8fe5ecd58ecce2f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accretion-avior-radiometric-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3811d7127ab0f5c5a2b3ec85970082d7d64f2cf6385ed38227ee4a60dbb9819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-oberon-lint-staged-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fbe5fbc07c10352f1d16b4b7e9d07886575f92405b0512a75a06a0655b6367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-mui-postgres-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda47166b625e26114e1aebf4cfcdf0ba36e5dc18a49ff0d9f0de1b5375abee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-procyon-charon-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0043c2d601e5e737e24d450f0337f2b0fd8171c546edc58da69d61cc5eac5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-tachyon-geochronology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c5712385fa129477281e98cbc714546f1b33bda214810ca0805130a57eb58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-epsilon-zeta-key-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-australis-inflation-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ecd16b89921defad1c9b79583eedf00225da0e26f2f98dc7a866f52c72ec13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-lyra-magellan-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81adcc48a2be10a01cfcdea5d7b3f48aed02eee2a2b8df9e474f6f4d3026e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-thuban-gacrux-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89edf3df3532bb49c2c76748f619d106892eaa539e1416145739aa8a307a1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-comet-transport-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c8d92d35be1e1dfe8247bfe1991bc31f583cadc4ac985cb06952c40c4ae695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-fetch-electron-builder-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9630f529c3a2decf0296dc89c233694d4d75a41419bdca5403cc0224582f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analyze-boolean-pipe-import-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d6af4eafe8bb6c343ca78255c86d63db6180291505a042e3bf2e432940f94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...