Malicious code in pavo-eleventy-aquarius-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce92abd6ed523d531c3e25190461a43f7effa31eaafced20fe4cda32b4ba9d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-rest-slides-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000bc6d60c2e882024d14774757d45f887e1685e183159005595d91a44a2f2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8df59cc076ff9c49da6ac43f3320f5cb7a81a307812ce3527b092acaf0a9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141423 Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9525cff2d4f497c1e161782ad3e5478832085c188b7182639221632cc9fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147318 Malicious code in resolvers-bellatrix-jsonp-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85843142028b8d29b219b1af7c43c167dc226099b6803ab77b73bedbb4a5f9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146386 Malicious code in postcss-deimos-express-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a01bdc174dfd05d600759d6d9aab8707546cd8172951c7e942208348b2d8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145373 Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140780 Malicious code in chromedriver-oauth-janus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62791def0816e082916b2005bff9eba87cfce1a7b2c95e38f692ff526ac514aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147059 Malicious code in react-bootstrap-europa-postcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190857e6da478036668ce13c9034e9c2c0db6a2eff008b51a0e927f06f540e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148391 Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141826 Malicious code in dynamo-express-quito-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490d923716f91683e1e1336297f9c34d2a2418731c1d1116174716d05c11cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146017 Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145976 Malicious code in passport-auth-mongoose-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d85f744ac10f023e729b0938e368ce262176e72333839512dcd5f6d5f7e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141909 Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141827 Malicious code in dynamo-jwt-figures-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd3975230bea9be10d63c55ca1aad40d879ee3f650bf54db20e9824353ae13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144980 Malicious code in mini-css-extract-plugin-meteor-capella-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2bffa9bd292d3a0b9290865876b6ebc6200573a041491ba008385a5a036a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-phenomic-miranda-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d2e82ce63670112679026f7d3cac4b6e5ca661260cd094fd9a863dfa5e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...