Malicious code in style-loader-metalsmith-jasmine-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3712922d77edf473092825a863d9355a77327462c5c6f5f3b17df4efe98155b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-uninstall-commitizen-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1a682f716f356bb60bb19ca4b742e28e0a2f687bd3c65928b836c790d0f8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-reveal-md-chariklo-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcade5cf30b3a0402a16ed5fe6a8901df4d3127ad009edaec8965926104d55dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-geckodriver-child-process-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01143fc1217691fde402cbf013f7cf34a528ca4f781075c77d5cee117f18c1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spawn-ora-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b45b053fc5fef77986d950b3d91ce01a07e7dc930d068576f08521050eb7178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-draco-wezen-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6b4cf0c27e8f1ed145b096b6bda80b9337b30903760551a33b4c905bb8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-phenomic-quito-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afaafb00394f0d7238e9fa41791de3af336b5b4166146eacc25b8822440b2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-graphql-procyon-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04c5e0e69cc449de0674247a3157f77fd9436b0b2b13b415c65aa14f991fca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-celeste-cors-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7492e3952d9434eafd92a7f6c3705c199c7ed56c4ee9f13f1a3fbdeccbf70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145759 Malicious code in oberon-xenos-process-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e025f47c913177a7992cfaf90cc9e7fb5b31a0018e27e73399b2e5c34a67df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148898 Malicious code in ultra-hyperion-cors-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f6d76b440b2cbee8813794a38ff75d10766939a035c4cbaa6f13a024b13c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146424 Malicious code in postcss-vuepress-nestjs-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089a9bf327ef0f08b1005680b1873ca15774ecd7a823578c1712213ad740d477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144749 Malicious code in materialize-polaris-gatsby-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b887a5fc89ada71a9d049c24c19e61cd6becd23fbfd0974d2bb116ffb64734d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144709 Malicious code in markdown-pdf-umbriel-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0730c03c2363c79a95bc64d4422f8ac83b7325564d3ae2117f4717d20e8fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146315 Malicious code in pm2-wezen-jest-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b4c758bdd6994f9f7ec62f125b619a3dc6ba4f6b7a8534103d898a9ef24211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-spawn-parcel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13194c1a937286d13ed6323189dfcfd26827e4122a40aae37f513b84c0a9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141513 Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...