Malicious code in express-barnard-materialize-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a191f03d0de88e41b68a22ef71a0a8b68d26ab8cd334dde584afdb34ce36af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-publish-less-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31faf24c46477d774d93db7d78b3c39311f6669c9cefc0ff371546695dd8b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-achernar-helios-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d836027b3386068716b796b3c8b1931f3c424a999bb8ecb693401a1ff21f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-miranda-ganymede-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7c44a3f1f3f88459a634ef82210b6a54688f79caebaabeac104d6283abd826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-terser-webpack-plugin-centauri-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2ac4b03271cb16933b3bb06352dad2cabd957adbd7ca78cff43af67f244e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-quantum-eslint-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5583c09e585f89c6e70686d3b73554e679f9f23c2d3be27d0f2939bbfee84334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-xo-supervisor-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a1be4297ae91e7c9f380f7cda1d94309794c765c1723339327d6d7ab5c587e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-ganymede-pipe-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c954e6402b44432bcab3a5e56f7e0501fb9f9e472b43938b179f3fb0754d2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147173 Malicious code in rehype-impulse-webdriverio-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d663cc2df1cbf1299f2e5768e87b102d9f8ed51c2a21762524f1959577dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145445 Malicious code in nightmare-rigel-playwright-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c7efc41fad8d61f889b7eebf60a8ddb47d40233875ab87da2ce0fd87cbef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144442 Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143166 Malicious code in halley-semantic-ui-proxima-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144797 Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f285c7d45797112ceab0a231619970762984e8ac052e668d9864ec4afeba50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141025 Malicious code in config-gridsome-rehype-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3e9d295e11aba56fb8c1aa2464bdcc78ac712308ed1d341483477311ad06bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...