Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3224b81b0368b1a9c8062355759b2499f2e030d243d5f932f91eced78b7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-node-sass-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e81b18803284efbb1d7493c9733c7ea8fb01527a0f6beca5143224cb3996ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-sagitta-arcturus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f263347af926c75d89e614c47c34631945ba0c0b5b83d24cf8f13a6213e2eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-toml-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-thuban-scripts-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef458e303d7a75de0988234b7597f060256d5a409b9cfb707a4041c94d8a5f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145052 Malicious code in miranda-rehype-node-config-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0be5e287facc7d63ef649739c481d1c712a604f3ece8ab28184f4a2ab2188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144495 Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144202 Malicious code in koa-process-gatsby-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798a18987a0275abf563f2f66f0c42262f0a090747f34fcd6f0305174adf9131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148732 Malicious code in tool-cosmos-vuepress-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f837862e72b2e94064b9f5e5c1e83988a35c9b9bc817860e5cdb806edf86ee84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140996 Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb9f36e47eee948dd38ebe0cf6ae2a2da5e5920cf63ac7a40deb44853bfc698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...