Malicious code in parcel-eslint-plugin-jovian-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fabfbbb638e1784f6712afa0d2fb5a1a260bc4611614939a7850fa327a2b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-request-axios-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2893e5c2e75e23ff044c882435ef17ec60ab89de147a37064ee46865b515f786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-europa-publish-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a09bc38436786092d99a19e3bf9e0d03927398fd2aeb6347409e17722db57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-tailwindcss-wolf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6136f0bf4e96ffb80b8fa0636d975fe1f01d92b14a4af0786a0d25f26d50b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-adonis-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007b2f11f8fdda0da7633f2f576840f23f5d98ec7af1de960701ee7d69088ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-titan-mini-css-extract-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252329e0187808c28119ff30a18d84ca1b02e0623e26bdfd8eefcb8d3830c61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-async-development-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c794074cf23781188924358c9312a94b858eadfedc0ab4122c54a1d54517ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-meissa-react-bootstrap-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96f088ba2cdb110f3cee7dd73edd1bc2a86c44569c753d51f346548c5d92ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-iota-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e337b3a1b57878bbc71d811c9092058ec1eeab9deff318459ddf6abb92cef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sagitta-commitlint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8d4af8548fd6dffe8219bc5c04d3605874cbaf28f4a936efcbd967d53b400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-airbnb-mira-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f4db1aca1ca265546cac79f643ee7152a63f7267c4e88d44b60bb105545c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-ophiuchus-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ac8cc683427a074124be21bbbbc3bf4c8fd07002d601cea16482cd45c5c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-proxima-dactyl-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f7ed81bbd1662bed8ceb0c5727d1de6c9aa86588f221bf5fabfd7affc36f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146819 Malicious code in publish-ultra-webdriver-manager-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add34f45e373dcd2f575e70cf18bc5a1222ee39cbfbd8e89b52cf8773ad1bf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146593 Malicious code in procyon-ganymede-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd8ff9b18481f1f0e39f42b03b654b1dca4dc879cf92f172796dd1a2a2aa249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...