Malicious code in uglify-js-supervisor-avior-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e62c7acf1016e1ffe6c9f001183b55d05715539a43a4ed89a371a38e64bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-sagitta-subscription-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76feec4c0ec22af6d32cf9249d74d286f41c8961ed3538c6a0a07fc6c71de1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146269 Malicious code in pipe-release-it-hermes-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463e48d072f87e12dcefa2b95cb79861ba03d5bbbdc8dd98e5490abf583b9d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144319 Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a1bbe9db986faf6cdb9d446f73fd84d8df8a0b68709c7614f3344107d666f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142760 Malicious code in gacrux-csv-capella-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035fbdde3702132c67d8c9bf3ea4d22da6a144316add5677b5ab473faff9a5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140187 Malicious code in build-pino-pretty-frontend-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136bd760b092d361738315dc7ba6e397b79b80fa76ad0d08a50c3c277bd10a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140709 Malicious code in chariklo-quark-middleware-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143289 Malicious code in hercules-meteor-sync-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1c40a1e572a21b09edc363496e9529bef3811850b83d40f0e9b07ca9d5be10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149563 Malicious code in wolf-sequelize-gatsby-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78340600d9c20207ae07ae4fb9e083761d01a2ac04e758d93763657b86ccc844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145233 Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146600 Malicious code in procyon-kastra-adonis-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a0da189071d0848cf5f16588875e2674d7f21e1186a66a3cd2bdfb05a1322c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147945 Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1fd93296551c523ea41407b98ea746afe18e970e55e894d1f83b0eaa59303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147773 Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140391 Malicious code in capella-materialize-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828f4c6f5942d153f057f566c75da70af3062e70779dddf44195eea130f5f177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...