Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-cressida-sadr-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632d8390f7a137232ada996173925b29157eaa43b6603af2eb336c152c78c735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-rest-test-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079c16883c6a20fca8f1e34413b0d21b32de7969853a453c6a50dbcf97ec0a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jasmine-koa-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8845c5894774db54bd64ae19d1f2c5c9490203df10056591e765976210998842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-stop-octans-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1b1a15d3ba59e05e07f0844a6b295600c018534c1440c88d98e555194da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-typeorm-mongodb-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc83ca1e203d8fbb6e77a66127b5b0d18ebe78c6a50e0dcb8417c8e665ae8a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-babel-callisto-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc01994de9ac0f3c9e8b834ecd334693337ec9532aad21b65cd517f159f6c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-transport-aether-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2f70e0ee9bfe40be60ec7cbc6f4db34b9d2c5881db0bcc8092bb165bfbfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-prettier-plugin-markdown-celeste-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487cd6f918d907b2e090c92c6b040fb136aa96869c210a9ed51a5530e1c979b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-gatsby-gravity-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff803168b2fe3f1d2344f342c7f9d5a4fe781a3468e065bc15a5a06b0aeafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-altair-europa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431958b7a5d25de1134d1791fd5552fd6b077c0313112a030d1ab074c1a4a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-yonder-prettier-plugin-markdown-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1834d70d079be8ad79fd0bf3df1d3b2bfe610236fefdcba9c92d247ca41bc301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-ultra-grunt-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff770cec8eb98e87d441bbd3804ca0cf7dee5cf9ea569733a7a118df8e241c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-altair-jwt-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf1dc048a8380f039444fe39e20ef82957c666685a75b24d72d792e31f15f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149450 Malicious code in wezen-airbnb-apollo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b37af348964b032eddc3ce59b194d73d50bcef3f435254bfc827f0218a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...