Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-ceres-quito-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9289dcef1793d204247573c436a3c5faac666646af49ab93fde9415166c97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-version-build-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba6079591827284cd67207a074de45cba5c746afc4d3cb6faac41206fdddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-lint-staged-janus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22eb79f93b9b093e3c75fd327caff60581f9359d9ae425e9c6666ca103cd538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-farout-postcss-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d665c28088eedfe73f9c8e9e233c2e38a00010cebadd41eb580f6925b4a130c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-helios-jekyll-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc021b0668f909b84b57151c40a8fc0e71fcdfb248bc540f7fffd18a761d5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-auth0-blitz-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146554 Malicious code in process-install-rollup-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53156fae37387a3d630d0ef0fa551919d0a384042b09cca6044d0c86ea7788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142310 Malicious code in event-duplex-node-config-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91782b6d72afe4d207bd69bcfab8387ad5e5b1f67818488fa1c67774655d9e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-cross-env-prettier-plugin-markdown-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d798b3df9722c02b19a63a5496fb67f9983705c530880060587015ae941e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-cosmos-soap-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1ba368fddb4ebbcb5c479a5aeffb91aed8d9906574a5bdf14d47291ed1c503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...