Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-carpo-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914086ee51ae4563ba23073d07e35f8b705aa241802887a976ff6891c372670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-loop-centaurus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e94a394ff4a3c9fe9b4d0840644983f11065ae70f6dded50fb5bd439dce54e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-winston-octans-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f91c97d70b21b2ab730a7e4c783098a6ee475dfc3913443291cf3a6f257c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-init-cosmiconfig-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f04d7568c3f028f9202f6fd6833b9c5817f3896fd5ac1dce658b94d355841a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-warp-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb3a25f9e7115cd8827ab56a1321c0f8f884a081a2f18d75c542301245404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-repository-mutation-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b893e5d04b7484d3c28cf6b43aa463dc842703409964fa8d83ffa865a9bbcc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140465 Malicious code in cassini-hapi-prettier-stylelint-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805ba38b148cfabe8f25665943929971e9a2d370343a3be456789c8d84ec390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147596 Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147196 Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144971 Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab84b007bf18d2be53f34e9459eef3ed9c6f3df11ecedfddf8cb18bb4da19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143891 Malicious code in javascript-stop-solis-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604e6dfd483497d82c03b53aa28709fb0bd1b3c4692e4a3b5af4259d9b7041b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147109 Malicious code in redis-magellan-hexo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d306ee87ba5effd1c09c4499374cc41c683e9287de16007dbd8653665a3c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141706 Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141999 Malicious code in eleventy-hyperion-nova-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a26aa108c03ab09f42e137ce63034d09c9d1028ffd7e9bc25d0d6bf4adad17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148509 Malicious code in terser-atlas-figures-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...