Malicious code in supervisor-zenith-ganymede-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a90b156b9a8819e787140ca064ef027ec6699605edd77ecf43ee17d3936bcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-subscription-mutation-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6069b47a6b2862e67c0f0f0744fb681095e2822c4e2f137380f566fd627e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146878 Malicious code in pyxis-helmet-dagda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261cb1f33e1f0746cada1e1ec1fd231ff24c1002066248b2efe40915d70ff48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145052 Malicious code in miranda-rehype-node-config-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0be5e287facc7d63ef649739c481d1c712a604f3ece8ab28184f4a2ab2188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141301 Malicious code in css-loader-dione-barnard-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2fcde06f546bb49c94f3bba2da60527bd8f2a6c3988c49f29ef8ab3ebc4f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140817 Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145594 Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-semantic-release-spectron-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789b9c2bd6f2aea5533f70a230da1e752358a6a24ff8f6cd758000f14176de92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146201 Malicious code in phoenix-markdown-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdc7c89040402f84c7f588132dda2fde733d422fa806aa30af0599cd5f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141476 Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149442 Malicious code in weywot-less-loader-grunt-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb982d6776874e40aa7709ce42d3645a50c6612d45d9a0a2c46a365ca6620f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-pyxis-draco-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c208b85d24de7d5be4b6de3acd5a387861ba181f46de1f1035b7f92b3461239b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-tool-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59537ec1da8042390b5ff9afa99b3b1c0213f8f29af17d6180a5281b0a061113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141355 Malicious code in csv-quantum-gemini-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b23ce53acc96ba7696a17390f3443dd9d989aaf078d6e6315d2fb91f08473e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140169 Malicious code in buffer-puppeteer-gacrux-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5322f7020a1f3604bfa09530366724aeb5e0f81e7f891d16090afe79b93494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145910 Malicious code in orbit-odin-browserify-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4373b2e80376f5a44f87674dead5a592928eb383aa730aec851118d775331cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149721 Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147698 Malicious code in schema-semantic-release-andromeda-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce88cb97bfc01a7e523bca9e01648fdfffd90883d6f47bed44e84981cbe7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147291 Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c589217cfc86f7c8e3f88b2b6a0e481940efe817e8590641395b29878ff94cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...