Malicious code in vulcan-blitz-got-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3a91dd5ac69a536e196591b1be2a0ab84547b5642fb5b934f4f6ba732d14a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147266 Malicious code in repository-global-commitlint-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e439146265fc847c2ba6635b34bdf04eab81a50a6bb7b732c0b65b4b98dd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140486 Malicious code in castor-kronos-jwt-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e97d020770a1734a20c2d706ef8eb38191d7b2a3d741f236a106d400b646af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149753 Malicious code in xo-rehype-phoebe-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f8ff4407903bc32c0dcdb711304ff649dd3492040e25b4f66f198e6940d911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147232 Malicious code in release-it-quantum-delphinus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68fc559ed11c01b8503c338131487afe6830e3c1af8279dee6f84371826125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148755 Malicious code in tool-stop-magellan-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425754f6af251723808e87b0e68201bf2b4a32eae0c5a5bf3b342e6f57b62f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147972 Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-rehype-sagitta-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef357f0f0dc562b08c3cf8f51a92672a8a6aab70dcf038eef02ac1f1eede87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-lacerta-loopback-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10b566e87b60203bc562c92b9862ed02dec4e6ad550ee5850521b5842cb516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-titan-mira-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-mui-corvus-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae850fa90ed2cc990a853247013a90d4c76c2a8919229e4104ddf0e465f671c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145692 Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-apex-nightwatch-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c57b286ddc57ae54033c79eb592e88344baf226bee98b7710e1289f2c944189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-package-markdown-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952b16eb60ed03681c44abafcaf46dd32e31af7ccc4d8fcdaf9149f4c1ceb47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-eslint-config-telesto-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6b3b8afa60d7366eb009f4ec27b46798e82d8153856f9a70813f982fee90a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...