Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-link-eleventy-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ebc1e11460b446c5c5307ff7dc44ff2b2888e9c27a939ba49a5527c724633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-webdriverio-fornax-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76177615ff9f0df95a462a669496d6ff6766962521bbb77e7631aaa6df847447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-jupiter-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5465d37e629fd147f904430a0ecbe14bd1ac0e835f9c833515fdc170327c89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-cosmos-restart-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd876bcb4ef1111bfcc1273681247b5e97e52ba912fa39284cfd0f37f70ddf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-figures-karma-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e3a0d376b13715a52ff3847b5b8c3c11a9b9944d6df465841ca5029f962c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-magellan-xanthus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae5bc0172f654995249a5a80e3bb2e62bf625d2f7599bfb7ff3166df47fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-concurrently-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfe0c3e58ae6358bb280c4b65e3b0a5ad1a578037814733f4f7581aa92c89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-gatsby-mysql-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5665518e65d519d977b2cc707a78c6be8ef6a5efb223966857feb2b01b5b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142829 Malicious code in ganymede-xenon-public-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22712844b046b055495c9f267eb2ca2d0528d3206da37d3cccb5acb32f064412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146129 Malicious code in phenomic-despina-dagda-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab449a137192f276f029ef3c6b3f440fb5830046c09e761a0471ccc9abb43b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147213 Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140677 Malicious code in changelog-pino-pretty-webpack-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d6638b975900b50323b6e5574a6f9015943249473e10e8dd1479c4597b329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146838 Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...