Malicious code in norma-cz-conventional-changelog-changelog-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72c73c24102a1ea8e836ef5ee6740a543a940fefc68ab2f2ec513b98fe55f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-ganymede-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3528842534dd10aa2d17333987b5c806f6eb520cfd49588cb9f587b849f61014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-blaze-heka-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51b8af5044f50a93459386244d570c089c10f5bcba81f155c01e484f9c28712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-proxima-nashira-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104278030a72c3633913dafea9d2872511fc08ef9999259ee4c8eadd3040cf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-wolf-kastra-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dada7cfbd3c9b525f4da20a53923820753281a805f97771a572db29d36a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-tailwindcss-json-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6717ec68ba9ab458bd15bd7723e2855842fe4ad35f81756da54693198f24091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-slides-update-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b821ce07d8e9dcb843859974063b10280997900b48d7779d021b1192131a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148664 Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147015 Malicious code in radiant-local-magellan-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b008f7cc192e9f504f1506fd14fee85d7b274ba80d2a60521cffc7753559a0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144695 Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f527d979b805966a29c97a0f6ba24c8df77bbdf6e19633f45420bca5790374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144337 Malicious code in less-loader-virgo-phenomic-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8ead56d5d6ecc6040860414893d3628f57a62269212a768df83deba87f671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147919 Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143526 Malicious code in ignite-spawn-fornax-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a8a37f81b9903ddacb56b345c59d7fd8bf72b4dc73ca290d3a66f9b2d814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141638 Malicious code in development-version-schema-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143246 Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139865 Malicious code in babel-jovian-despina-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2823367bbc3c7c96040c5a58d99c6d21a66d43a7f43c856472b6e49615b3b84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140997 Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145788 Malicious code in odin-ariel-superagent-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca853f43538e6ccaf35faefcedd77f689550d06c97ab07e67480f13aa5f446fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...