Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-indus-ceres-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183d484945bde92944532e2b9af5c200b70e70bcd5879553d78a8deb2da8f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-fork-rehype-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bd2af128bab75e78effa18885ce78d40f2fe2aac43ad15b786c5fcb3399f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-node-config-server-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27de1abef874cf3da3daa143496ccb15836fbb297490b54876df4e5a445ce103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-polaris-dotenv-safe-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57e19ab1937184b42b470fef639f3354a1f7f637d15d6acba77b90c665a4194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-kastra-arcturus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab672036f622cc17403edf366693566cfdad9c4ddc1cf8820ab62c4cd78e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-envconfig-bootes-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c603800bbff9b6886548978ff6df941a13ca7f23109be574c0f203af1e116c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139965 Malicious code in betelgeuse-andromeda-supervisor-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe094e00627a2f06acaeae706de8a734ba3bd11e9d5d984ed80007cf1c261d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139903 Malicious code in barnard-commitlint-hermes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8004b6ca73f38ad76ad7c7d80bf57deecfafcba1ecb618d13d4776d066d13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143542 Malicious code in impulse-event-stop-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6630ad4ab8d3fb3fa9067999a33f750b0497f8ecde88df05ef9105eae291e79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141733 Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149196 Malicious code in vuepress-miranda-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bff913ba9557155fdba91e2de8f7c7272ae33b7af485e13141411e5ad745346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140264 Malicious code in cache-build-commitlint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdd3e069afa219b7f200c4de2044062b61cd5636880c70289141ffc156b82ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149037 Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146747 Malicious code in proxima-transport-pulsar-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd5d66b59f878e14ee4cc32f6bb2d9d17b8fac7dd4a593beaa5d64a80e21e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...