Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-toml-mocha-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb6c01a744d2a87102e2f7a4c1544a42bf5ce2168f0ef424b8ef24f9adddda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147162 Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139632 Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145154 Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149641 Malicious code in xenon-ariel-foundation-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142341 Malicious code in exec-geckodriver-octans-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9229208f0bbf990d1891de79b9d2b99741eb73cfb03133c03e8d495f8f34529e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146469 Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148455 Malicious code in tailwindcss-slidev-antd-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be2c69fad5b110b2dbeeea015fbe299ab9aa61c3feaa29d68a296c5fbf22be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146088 Malicious code in perseus-javascript-update-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdafba81fa85aec8eb3d74a182a1360b3ed82de57bb6c85a9575ab328decd44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143107 Malicious code in grus-vortex-astro-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61e3280e1988ae1427e0687e09494aef1d2eb0292075f75ddbd7458039d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139378 Malicious code in andromeda-markdown-pdf-loglevel-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022d30d17df30a59e7919fbc13c80d55980698812493846073dc6a911a8912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141615 Malicious code in development-changelog-publish-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba5a3360f88d40dbad8ecd7069fffd546d8daa1e0992e70276075c9638951b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149294 Malicious code in wasat-mdx-rate-limiter-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0f70be6c63321ba8f99aa21a4539ca8d3c3df796d1581f025866df7308c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...