Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383f3b0b1391bfd0c00a3d1e37ddbcccfb1df98f150dc0f63769832c19d0e281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-supervisor-carina-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b50b99a8cb8642debc3f086f17977ae108b50845fbb715a621dea9a9aa96ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-jupiter-dotenv-safe-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbaf1d581e52bc2f97c438b473587e99860b9bda454d248416a4103e16aa1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-iota-release-it-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-supervisor-figures-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8dc82658386166636f6748e27672a190294e705b2ebc6767c5e4b235b172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-rehype-ursa-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bdd382eb1e539450124dd835e0c6ec1041569faf9e48d98e50bcae43941623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-antares-eslint-plugin-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8a5b6972240c48c0b37ed1252dc6990aa4763cca8a5cd7f23c5ae0bd9c56ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-promise-airbnb-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52083ff1210db5c0190ea675543f7b26ee8b659b12480c04548f5902aec8103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-fornax-scripts-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b24a4805f69c694b755d320a93a2363344653864b86f7c05ec19bf0d1b07dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144093 Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140704 Malicious code in chariklo-mongoose-corvus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b778f62ff3e50c7e087b010f41e56a52e5f270155f52bed36a78f8f40085da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144274 Malicious code in leda-jabbah-exec-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f29319155c079ffff7417dcf3d0ea8b3d96b518e7331384270a81b06f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147951 Malicious code in sirius-fornax-process-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18cca3b1bc8f7e73a9387d862aa3db2328ae3d33cad98bab4d1abcc726e699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139366 Malicious code in altair-scripts-dagda-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3a83b3d29fadebfc93ee31ec22b2fba479781dbec590684f1877f0b2d8f572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141277 Malicious code in cross-env-yaml-meteor-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143678 Malicious code in install-got-dorado-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d83786c06b40388453046b11e3e8daaab0a474693577cefbd09193e1f4fd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146898 Malicious code in quantum-commitlint-config-angular-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0610553b6d391b26ea61da0ebe011f1788f208b501fa46e2ed0c1f3ff7bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146461 Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f372a656fe0832a9443ce6a331a1826c8e5a2415fb49cf2868ea557c790b248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141884 Malicious code in elara-miranda-loglevel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3a74afa063e750e59a4c9dcaecb657e8bdd9b3db133747e9ddf860c67be682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...