Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-local-jest-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26fc3b03ef31a02fd7707e51d12da7af5f9bb6a697f7e24df86a5a5c306cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144981 Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144829 Malicious code in meissa-process-query-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ae5fdd1780de97e98dc346d7a17d21adba49ea87d63f32d85c3c2e030b0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144980 Malicious code in mini-css-extract-plugin-meteor-capella-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2bffa9bd292d3a0b9290865876b6ebc6200573a041491ba008385a5a036a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149245 Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbac709081533786703a9d2c820cc05cc6e037c57d2336727371303e83624a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143177 Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144976 Malicious code in mini-css-extract-plugin-heka-miranda-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1fa0070a7b54d9426e52227a9e3f7dc92ed67265f0518bd45fefc50d15b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143127 Malicious code in halley-airbnb-toml-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a603b9adafc76612cfcb012fe930172074af1ff062c4df5f8bdbf21c25fc845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141127 Malicious code in cors-izar-fusion-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe38d42c65a80d37c46ca5fac086285b75fd0c102b0c8701b9a79460dc0b9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148089 Malicious code in solis-spinner-canopus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70de15daf42e5880fe1aef7c23ceaf254db562fb9cb058e44b29f7c137f04ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141655 Malicious code in docusaurus-apollo-procyon-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d68775694f1a02f061a9166189e1da1036c33dc0f57dd3bad87a9118563e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...