Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b8b360a5dadb05d9cbb10f9de323e7fde5d751877b4f12018344d078f414a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-tethys-rigel-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62550c057a10297babdc1cce7d9df5ad7a9930be11ddc85bfcb3e908f20ec4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-async-sagitta-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-terser-avior-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7250d997601bf9650f92fb361f0b19215ebb038518c5ff63a958a9eb4dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-prompts-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfc21902cbbe288d44e67e91822e196ee14eb461970003305eba5225b5ceffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-passport-dione-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfc76c7e554c7c02fa03e7f10bc596b151fa82e14ab6225d84272811a080a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-geckodriver-thuban-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd589d310cc6a2712267379d31c495e64bbcd970dfdff92912d57032f89721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-dynamo-cordelia-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4aa0b9d1c5aa9ac055d76cf23c0ecb2393f85ac92efa3921f1bab0e7559402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-chai-indus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078962811ac003829123acb73f64404da664a345beaa595a158d60b963e27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145548 Malicious code in node-sass-mini-css-extract-plugin-spawn-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2940744429a3d05589b66affeedbda6ce1cd9484a8fcbf4e5eadc7dc1b2982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142047 Malicious code in enif-forever-auth0-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee4492bc9581277183908f641b1c2574e5a5be753baa776d334cf81c88d2b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148907 Malicious code in ultra-sass-loader-pegasus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582c937e56d01f391201e9c3ab543d08c5f1fefed78d980ff35171b20714de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-corvus-enif-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e241e8e58df7e4e881758896c71bbf5f061b413610ef47186c207cc5ed6f30e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140532 Malicious code in centauri-nashira-command-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2759382bc8889aa98110e33c7872c4ddf1f73bdfd15d8b24712a94a12d0d9d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141270 Malicious code in cross-env-sails-pino-pretty-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff472b53ca019f8b396f192549d6ea6ac94ddc96058c84452a9ba0390ae1bc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147571 Malicious code in sadr-prettier-plugin-markdown-carpo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b15cc979aab6570e634d54c5e1e033330806b975bdac0cfd9242eb7f9a687c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144757 Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...