Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-meissa-install-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e694afa9ed340f715efa6d82a75a2aafd8cd410e334c6974fb4f9d2fb94c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-fornax-terser-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8362755930a3cf4a26b1bc94e15abf929162cddfd7dca4381c2381381116dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-spectron-webdriver-levels-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59afb146d54e37d45ee9758db697a52bdfbf02c0221da29a86c0a21320fc2a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-ignite-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-europa-remark-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499420da960ee4fe7fe2479f0c22372a570f7973d6202e7667104cd5e5be1889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cosmiconfig-solis-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981f825bd720b550d359e8a17c2bb67f513f8565725791de20db81dc709ea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-vega-hyperion-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc82e9b40a9dd105dc85816bae54c3df108092997744a8455a3dbd46a8b485a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sadr-odin-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3129df2b2edc59326781977e3d8f02266f7c7198319ed2dcf322d62530d4e33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-quasar-webdriverio-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c09e54ebc6eec10368771375dbb392a2cd112cb37bbd784a862a602dc472d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148629 Malicious code in tethys-pino-pretty-algol-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467af395bce0f84fc6451ae43c6c749e70edd4dbd4beec8a23658c5071d81ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147421 Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142448 Malicious code in fetch-iota-nightwatch-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecaa36e1fb83a4532aef057116819bd4ce4df934146be5ab85d9818aa0a68cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146168 Malicious code in phoebe-orbit-redis-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957cfc765b8daa82d4a320788625032a8cc33b88ebf52723fcb105fbac1146fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148986 Malicious code in unuk-sedna-cross-env-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46ecc9ad12a0b9cd7f2d3eb400ba8eea4dd4bf8faeac232d404afb24f07801d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140182 Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149733 Malicious code in xml-phoebe-cosmos-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e66620c9fb8f04758af3a93aaa8632aa02f57abf05ef264c346a029a640b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...