Malicious code in weywot-resolvers-vuepress-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdb11770ab86d295bfb45a4a377949b744a249875509122d45dee4c8f543e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-stop-mongoose-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e478404081fda9c06b6eed4328a43c5d28a9e605813d10a8317ecfca11a21aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50342f66aea54d13a2bfba5a8069396f221e278212a13e5a0002e74b7786f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lepton-weywot-mira-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6f9d66b6ec16e62056ff7cfe9f1e3211bb59ec315c9861d4881df2c50af75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-spectron-webdriver-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-elara-hadron-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5e131353d5f6106fa2496e00f7ad443ad3e792fa0a1d9faf3e536b245446df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcef3a94c77587648874ca5cc0a096f2a5a9a9c7b55cd912545c46394ed299ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-photon-nodejs-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3152b5d159e60035f53ed829f5362c99844bd6585f8e614ae1b496a79ee78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-nodemon-sedimentology-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e790ec19781e6bae0e122b31564bb4f314ef39cee5af5b11865dd3d38e722a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185670 Malicious code in authenticate-function-scale-cloud-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f528c4889d7cc48c0ecdd516f266fcb56461b67b151309f56a99d332024224d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187813 Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbb20d4bd0ecb369e109ab32d36b1f7d0610fb45df7d23e8f9bbf0db5f3c22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186506 Malicious code in decompress-simple-lambda-container-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a56f01a80d1fe9a2a4e14344b3a37f67f649c9c2f15d90b3604f6dc5c138e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190343 Malicious code in wolf-baryon-pino-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5c26b4bbddebc8e36586c62ff40c2aa982515ba61ec3a07619de7e7851a02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189353 Malicious code in sass-loader-cluster-link-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457c2e864673b1e699b6d103dedadc301fb27dd6c6ceb5e99f0f2acfef90a5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186682 Malicious code in eclipse-ursa-element-ui-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189093 Malicious code in readable-commitizen-photon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d1e169b74fcf6ff21db17a2bd352872408a7e6aa151fdd40f7844915ba42af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187454 Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187044 Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...