Malicious code in transport-sedna-reveal-md-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f033be6c88dcdff6f6ff0908652951a9f0c7c62e2de7626708ef9fbc65f8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-gridsome-less-loader-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a7c959df4560a355bfcd68e15080007566b2e99e74162477598c165db3994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149348 Malicious code in webdriver-mocha-geckodriver-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424af51b3129b7f488560fc79efa78acbfe2a6acedce4e79dde2a31d03191a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148996 Malicious code in update-ganymede-typeorm-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d9c347f981d0c30b3542a82ff394ac958982da974b04c61e44d8d637fd24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145499 Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142620 Malicious code in fornax-fomalhaut-forever-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97181f8fb9f738f11f4c8c0ffc05468f3f7559bfba7aabd1285be7e7ae7db103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139603 Malicious code in astro-fetch-orbit-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4a4aec0103e82a9b92eec6da2e2f37912178bf0574e603571607567dc07da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139343 Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149318 Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80104e90fd19f09841b6626aaa8cbe13df52164d7956580530aabff25a1caaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149651 Malicious code in xenon-mensa-wolf-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db5db959af39c9edf8f563ffa5944b303521105744334beef652eec89b55a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146526 Malicious code in prettier-xanthus-mira-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a4a84f5c6957d09542a7fbcfa103162352aa4cb119d5508f2321327c232bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146034 Malicious code in pegasus-helios-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443c660eeccc84458663b73683dd4f9945a478b35f6e205b836a99b218487f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-phoenix-eslint-config-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e2d78552580aeb2d96be7e24039e24b488659a043cf2e9ade9ba758d552722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-iota-sedna-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0951cf7f9333702afff9bb26db65d093a3a169d26b74598e2e501bcd246b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...