Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-alphard-promise-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2d18ca2f3faec8f5b44d1646ac4e157f8fd63aa204750ef48ed219fceef1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-pino-pretty-frontend-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136bd760b092d361738315dc7ba6e397b79b80fa76ad0d08a50c3c277bd10a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149541 Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141672 Malicious code in docusaurus-package-odin-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80c72158c29c094f5a17f94d21f9bc8882f4f430bea81bbd357f33a021a4a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146008 Malicious code in pavo-registry-sass-loader-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f61238fa21b5f97c0b5d267d86f8ed1bb47f8660f3e7420aeef43de1cf3251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142241 Malicious code in eslint-plugin-sadr-commitizen-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2458790d8a94f3e458db7c76cae20f1c9bc1d93ef09dbcc916bf4b8947c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144940 Malicious code in meteor-start-query-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149795 Malicious code in yaml-meissa-metalsmith-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813c135c90f9f7d46aa55e10b0dc894ba8db0b83c98c60e70abb69347031ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145938 Malicious code in package-luna-prettier-plugin-markdown-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75efe02b19ff9ec70cbd27c5dc3b7ff7f2efe7c12ee542ff0ba4d8f933f0cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144176 Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141904 Malicious code in electron-builder-gulp-tailwindcss-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d4a8408f67e5a389dcd3135098f6df1df0ac6758257dd344820cfdfe824b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143476 Malicious code in hyperion-hermes-jsonp-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3608e2c39c794c9d92a08b2aa5723896c9f48f4e929c74156c60e7d1a567b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145812 Malicious code in ophiuchus-configstore-iota-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cb6f533c684765ac7c1827d4186a08b8cb864ea4fe108ce60b4a231a9f0911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147038 Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145686 Malicious code in npm-norma-remark-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12b4a51a9bd51375eb46efadb9d9a3ed0b9a9efa29da69be155f816c9b3e347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...