Malicious code in slidev-config-prettier-plugin-markdown-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e834e497b6d587ec03ff3266acade36150e5844f41ba3cf81c5e4d8bed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-pm2-metalsmith-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-slidev-middleware-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344684591780ddb2924ad9c248fd8d91d956e9e4ffe38df0593aa3a037c0a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-gemini-miranda-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f28fccc481744cd6741ba11920c2b73942570a19cfb4e00807f6b56f3a72266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-atlas-bunyan-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342ccff9c90a37b95f109a686f983a092bbaa10d056793b078819132e688deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ignite-arcturus-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02efe1bbb2a2449adec297c17d1ec80cfa16c0a66e9372af5fb45a925bf1e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-library-virgo-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403478779c33351d238232dcc3fdb2b77802c9afaa62025f5fd8fa6a8d1ae546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-puppeteer-sirius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-cressida-callback-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c77ef0113fc08e0a50e8478f17c2181fa693d186f69010fad57b5fb1a431e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-spectron-proxima-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141768 Malicious code in dotenv-safe-parcel-convict-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3887411420b633571876d73bdc8d64a712e76bcccdfd293ea444bddc36a38c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148553 Malicious code in terser-webpack-plugin-impulse-inquirer-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74331383fd71651f9cdb11492c213881425ef996a503ea374ee428fd199ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...