Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-prompts-meissa-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7444d1efb910638a58715c22822c78fba1ee61e841b95a0f0f846fd5a6529fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-changelog-webdriverio-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0e59c7d74bb68f1c08f1fee54f8e1295b7afd6445c1ba26ecea6f7b75a3365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-impulse-grus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509545da991311d3beee8db0afc074abdfa583a2df12ad31f8434c955243b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-heka-chakra-ui-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae1184dd4f60e3b2275845574ebb643cb6f3a70b0d5d35c2daf60368109d82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142222 Malicious code in eslint-hugo-indus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96530a9a643952073fff332c1ad656ea9314648258f54a2ba8a5b6cd6ed8ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143077 Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149588 Malicious code in xanadu-await-rehype-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb456e8d781aa45a1dacbf7f30970b88acc27ae993d3a50689322268cf4fcef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147038 Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139297 Malicious code in algol-levels-socketio-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24842ddc29a72af81de475accacf34548de3619c4b5baed519de7e27f5778307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146899 Malicious code in quantum-configstore-mensa-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620184656a6dd55b2aace0ebf241f117584297c3f05dddbad3fa1bba28d33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149584 Malicious code in writable-xo-zenobia-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb79cb573188c5f1c88906173ef040f515a4e0f8c4124c224f975bc85f7e44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141105 Malicious code in cordelia-node-sass-titan-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aba470b153d913a8363811c0bdbc4300aa4833b9a41af28b0d7a3c678ac301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141834 Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147300 Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140056 Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...