Malicious code in perseus-castor-reveal-md-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5365c0a699b02ff0b087a796b574c48e9afc78a41a294ebe89ae97b7c8d3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142328 Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139184 Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142452 Malicious code in fetch-polaris-loopback-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544bff7381c9dd2c0e1de48ed79409665cd07f2f3ae49b375ecf4ddd3545372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140082 Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140973 Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c226c4b1a3a0f8193958d600960e0a77134c920f899336f377da7683130fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146770 Malicious code in public-supervisor-semantic-release-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca5cb99f5d1988c28b92f7426f9594a34d30f68949c8950719d17e65f59c3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139540 Malicious code in aquarius-mdx-parcel-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a19028e86bfb9dcc6f5f0eaa284b5bcb2698b973e93782079cf771658fc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139183 Malicious code in acamar-perseus-rehype-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13b3b72eddbdd6b698b8dbe987a04af1fba5606494eadc3fc663de33f32e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147856 Malicious code in semantic-ui-schema-kastra-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78ff75cca6dce1a6065ec67baffcff08f761cb7c53cc45a0ab0529a5d9b0bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148818 Malicious code in triton-global-unuk-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c921ce746228fdf87fe40af86967ba32d1a97b119bba6f2f8e9250b4306e22d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140100 Malicious code in bootstrap-comet-convict-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141318 Malicious code in css-loader-tailwindcss-sadr-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa42d6992763665ae1b08152de072d9e124be886828924073dc84314370e78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-elektra-meteor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec321cc8d8a1cb04ceb61935280a6bf3e36c4d2762d39ecac3715152c646fce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-triton-json-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57591b9b0080897eb363727411b04eb1864ef0f8f7bc0e20bfb6d0cfb9f470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-changelog-xenos-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86aca0815621f69cf5d331bc8091efad1fcdce25c829787fc1a4df33c99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-mongodb-css-loader-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...