Malicious code in lacerta-mutation-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1a8778a9919d1bf804f1ffc224052d3b82fa960b4e13abb3c34bc2b1c21a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-terser-local-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf83eeda2e0c97943fb7604db997f17502948b273c08090faa6b78153a60de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-flare-kronos-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0a46c44f30d7254910351bb7325d047ea54e9a001b5120f903e60c06cecac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-nestjs-firebase-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0dde942382f6ddca3adc5a8a1f9067c84a87ce3dedd4773c5f204d394ce2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-stream-playwright-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b3fd81d19302da9d8cc7b33e3af97084a394baaaa387caa7dcc86a22a5b040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-charon-jwt-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7c17e325cdfd81b50bfbe7da11a4618b5b0413548e5d5ae0b0dff6f46a53f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148892 Malicious code in ultra-eslint-plugin-levels-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c0e6023a4a0a627300221eeb5bbb3e70c0f49572a3e51aaf6d797bd0352d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147182 Malicious code in rehype-remark-sagitta-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9621a0c04e54a0924449a78b942bf69d5d4428434482ac10c175cad19d3b0b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142700 Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145158 Malicious code in mongoose-koa-jekyll-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e938303663a27d9f806911acfb796bc1db37b7e755a0b5ea10cb0f1a0132e6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...