Malicious code in phoebe-orbit-redis-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957cfc765b8daa82d4a320788625032a8cc33b88ebf52723fcb105fbac1146fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-elektra-vortex-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c959720c38f7a9ad315da296dda18f9ef35605b92b08d3fed920e1e332b18c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141710 Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edd49dd5c49c31d0cbf8fd0c1cb15be270a7b24c5375c64ca5649c9779c8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147607 Malicious code in sagitta-oberon-json-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cb20254e1fba013cee3ebbdc026315453ab57faff4d5dd7e2f54f5ae271983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145860 Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143769 Malicious code in jabbah-astro-update-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d05c71d4e664abc9f344c8ae0080f7d1f437b56a3bfa83439c01a3b1374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140563 Malicious code in ceres-electron-builder-nuxtjs-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27af84557abb99210e779cdf34c4b8aa18e306ab7d8f146d19b2a1a8fcfff34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146667 Malicious code in prompts-less-loader-child-process-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bfea49021b595c84561663f6b7c03b3694d20acdf6ee80ebfc5590c4deb503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139851 Malicious code in babel-delphinus-envconfig-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8046a5c617b1040dbc97962fa241b562a14f16e3039d8bc96bac9c765ea34405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139794 Malicious code in await-castor-middleware-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce9d7732b56596adfb5fda97c2500f0a29f16cdba6713c3badf04c3d81f0b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-procyon-materialize-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf32de71538c5a3fc936507de3a7014c69435ee1c7ace63acb5b28f209849a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-playwright-lacerta-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1208ff45dd006a097793072c093d443a2de50d88981ecb93b4111e96b46ba2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-nuxtjs-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fbe6a0139f93fe7eb3f20cb671d10dfb136b047d88376d204c1af7a02cdae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-altair-janus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5c9ad920673d1292343afd8eaafad8a8ebb75d99982e3a69f8c00258a4f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-sirius-chromedriver-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4341d925bc89fea46025829c726c45c0df2128b9cdbe42ab09851ce404f9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145579 Malicious code in nodemon-chalk-standard-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc33a1334c3ba3564f3045da232e4e02b45ad806f336f9e1fab0efe8a107f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...