Malicious code in pino-loop-relay-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414d0d5c89c6babf69a75fd4a13892cba890b3aa412035672d712a9fdcbc9c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-upgrade-remark-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59399cefad893f72472df77482546ff2e4acbd7f3456d03c6d07554edc9eab8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-eslint-config-oberon-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c4c0e62e8c49c2652c99b6d019a56b3b2842aa5df013883cb486bf9dada4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-betelgeuse-prompts-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37548852b9e2e29fa1352326410220aa2022e5a048d2bfbe0c8336622f649fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-rimraf-eslint-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c78f0a4fae1045293325cfb302d1b4d38bfcac2d5281d407656997d74453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-loop-npm-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146396 Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-cordelia-ignite-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191f77137175533bdac0d7f62ee240d294f070f0fe423479516c0edf01b5fcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147542 Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141637 Malicious code in development-ursa-upgrade-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147544 Malicious code in run-script-got-cross-env-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff9bfacb88160eb86cdff05b33e80ccc35019431641ff471b088dbeb4ff399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144305 Malicious code in less-arcturus-charon-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08baccd9d82c30e5e6c477d773783cfbd6d66f0cf6dca7d0451eda1e7cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148749 Malicious code in tool-proxima-shelljs-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700c548dddf10ca56e72c2b175f0ec0af8b18e39f9d0a0033c32499e6a5e8872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140546 Malicious code in centaurus-kinetic-sirius-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50fcc30fa8139ed73af6f44bac4efde53a44deea5dd313e881996fb0bc85c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140917 Malicious code in command-ophiuchus-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71777ff20b2261fa16a73576b34d21d19d404c983e8f479a1239d8d15976b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141512 Malicious code in delphinus-auriga-helios-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce6aef65b047690f12ec284b604cd35af45717c4af859051fd00bb4939858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142876 Malicious code in geckodriver-mysql-forever-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf46b206b074d2689df4a4a26220a882b67118ea0bf588a092a3e1f79777dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...