Malicious code in json-figures-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f0f17392b56d80f72cd5d178af7fead25d375c34ebf71364de580a8bc05822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-blitz-meteor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4371531f66e76c21381869af17ca3e23ae3771e2f22bc30ec2763d6dfe81e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-writable-pino-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50d36da15c6cb7b0847c738d99b99be6ee6f7075fc0743fe3b6719e1d23e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-pavo-lyra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da28957920f07798c64c5a38ab1c1290b06db95caf3906aed69d60c3458f329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-prettier-stylelint-sync-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d5c98db5b7146df7a441581fdd939b2117265622711d8ed278484b18dc0319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-electron-spinner-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d05f3932064f0cda377159594ea43d8665348be67a33b6f5030702c017cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-dorado-arcturus-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989b710e537fc775ad4d9598cd5612ba8e23149980fb376951978a776fda01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-init-protractor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032e8238a6375ae58cc650383f15b3bf4e597ee8fa88e72398c702acbd328810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141561 Malicious code in deneb-ursa-karma-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b979dee2a65906b1f5f1bc4c9fc7201001a399c12ab05938d322fd1880481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144577 Malicious code in luna-perseus-process-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d111f25f7d0648db4294cabc196148f31f40a14e517a35702870ab1ddef6bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142201 Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1864a9f0a978b5307fe3bb4e9683fa2dad642b51c5213fba3a16a358a2a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144274 Malicious code in leda-jabbah-exec-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f29319155c079ffff7417dcf3d0ea8b3d96b518e7331384270a81b06f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144083 Malicious code in jwt-publish-hermes-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed0d9ac5f74a79bcc66d9aaa67b60d041eebe36f6287a5dd01a2cc9ff9c830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142937 Malicious code in global-hyperion-antd-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f0e0f4384ae36dc74db8016717d9057b0289fb591be45f44f0efa7bd87c0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...