Malicious code in dotenv-parse-variables-convict-fusion-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca6eb8631db89303e16034582660ccd74eeb93a6ba715b0bc50d4579f7ee47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-despina-dagda-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab449a137192f276f029ef3c6b3f440fb5830046c09e761a0471ccc9abb43b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85498b1cfb1363adf7f3f0607af18be5b0295e58123b95537e8af5ec9afe85b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-less-loader-wolf-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4660974b82eba50e6a46175e2eb14b0588dc47c39299a00712db48078494c627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-mini-css-extract-plugin-warp-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3357c4e31d5cab2671ad09ce4bf8ccbeb8ae0603400a2f4843a61c807fecf18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-sadr-writable-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f47a4f4423c22a74e9dc21808416e8e2848da7b569aa21cb9d0bc7e67cecdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-halley-middleware-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3076fe57c760cf3d4422180906de48b72abea4f1b53c7e7e850d04ae24e820db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-canopus-winston-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a353f691fe89d06cc5a0592a2b088fb07a79f8484ecadd2d786a6a6f3b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-supervisor-frontend-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2029dfc8b076f14a12671411583cb22e9e6cafc8db1af4921efef284bd2410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-transform-miranda-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2df64fdb9101c4aa9e9f2408cfce30f0f23aa22ed2e41e82bbb0d83a66863e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-cygnus-restart-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b023999bb7860791d70cbb22c24dc0e3793a114e9a7edcfd7d4cea97c2f2d667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-xanthus-publish-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b554e5795b09009304395c41d2d8ed261efbb6c45efc062cfe2be9d87132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147361 Malicious code in rest-publish-algol-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7566a3cbb5bac2b16d724843e2eff719ebf48475bef2fd16561b7d5bb7ca51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141492 Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147161 Malicious code in rehype-astro-pm2-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d442b4964528252da778f93881462ca24cd58ed6925e237ae9b5b531fe189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...