Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-meteor-atlas-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c3b77e5bb6a6d144260da883df3819f2190617ca8cbed978589e54f2460bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-gemini-xml-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33afff028fbff8c3f87b0f9a396f96b1919f6780386b7fef8851a69e238f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142773 Malicious code in gacrux-nightmare-electron-builder-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4014bb2f2419fca4fca93e72a600a6fb2d56786b81f6dde8040e3a24004ef7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146803 Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141212 Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149384 Malicious code in webdriverio-supervisor-ignite-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6424a19d1f6e46b75ee33765eb3e2b1b1e49ba83db401debdff270e51bb9ccdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145639 Malicious code in norma-cz-conventional-changelog-changelog-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72c73c24102a1ea8e836ef5ee6740a543a940fefc68ab2f2ec513b98fe55f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142177 Malicious code in eris-miranda-csv-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08de3a8d81298ce8a508487d4353acf11b5e3fed26f67cac0a62919a1ba1851b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149676 Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145145 Malicious code in mongoose-altair-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098ba0624983e816986795af3e5a8fbdfcc6ef8446ff26353af8a45c6ef0a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...