Malicious code in rehype-upgrade-npm-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e59d3349978c49eef4c99a61852603a8d0312ff6a182eba2bf50e696dd2af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-upgrade-celeste-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820d8f46993738f98dec508b4393021d4bdbcb9dce746d48ce684c3ee1fb7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-bootstrap-rollup-plugin-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7bbe5e837b28f9e4274f2918f25ddbe0c195af41f7991b59ecc91728eff530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-adonis-kastra-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec12e9d021d38f1396774e15aed3fc937841fe74ebd34c63516944c0f9a23f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-dynamo-axios-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609bae32965b6115352a6c6f0a2e3f26630ab7c7a85532b8c34e12ada679b9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-xerxes-parcel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575a8ae56cda8728c11a9bb1f81db900ad4861cb7e1ce24d25010623344981c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-cache-socketio-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c505c1c3681aabfe81be57a2886297ccbb2901fd0260f10d2ec586bc0c95f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-xerxes-comet-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145087 Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144891 Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140351 Malicious code in callisto-spawn-parcel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13194c1a937286d13ed6323189dfcfd26827e4122a40aae37f513b84c0a9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145656 Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142128 Malicious code in equinox-nodejs-csrf-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975315d4e177db7a394dfd05890d08f20a080994d0091cfe03b455a5044775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144379 Malicious code in library-magellan-telesto-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141243 Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a46a9c2846a091e28a3a4dc8c51bc71bdde5de64a5745a8b0b0b66988ee9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140050 Malicious code in blitz-lint-odin-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2759da427a8c26f4ae71507e7ef49ed76673f5659515b142159661b256b8ee52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...