Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-weywot-xenon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9067243135c3a1d2c24a2e061e3cf70ce446a10f71d45011eea83ff5d197ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143297 Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149453 Malicious code in wezen-duplex-cypress-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60ddf1c40b01d135569731cc3be7be938f6a22260de0d1f1e0cf256d2be7c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145433 Malicious code in nightmare-dynamo-meissa-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432e3c88b4f234e7077788b7b05eb8f49ef8c5568c00a24927111eb4f0c3c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146852 Malicious code in puppeteer-equinox-polaris-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f13932f9a8e3539f087bc416ba6f2dba7f3d6ed4e3551db43cf729c76f2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148102 Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147450 Malicious code in rimraf-izar-html-webpack-plugin-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f0af5a2acd4f35bc9f6a12bfdee60b30945dd4a21464b014b22f579711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141739 Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145170 Malicious code in morgan-browserify-install-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0347568bd4177056426b3477b7d55efb1804f72f2a55caddd63efe23dead5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149074 Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-public-uglify-js-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92633050fb8adf6a74a175f582df02a6039d7469d7d6b33ebfc02ab978a9fbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-mysql-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea8a1aaeac6c1573aba5d83e8b0d8aabac6f7118b4d1347f2ede074d5347984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-centauri-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10971ec1a6733e379704351180a293b3f5699ba9e8531303ce8229853c62bc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4726ae38cccfb92349767aa6eb73f557bdef28389337380ecb62004c3fa5514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...