Malicious code in rehype-winston-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-fornax-yakutsk-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4146fe49f7b6256b420a78fcb513ed920fd481edd057f15304dfa337fa61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-convict-nova-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52298d621a66fe7a0eb02409e2c6b190bcd68b50065d077d4702828ca83313ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149477 Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149331 Malicious code in webdriver-manager-ophiuchus-magellan-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2be086a4c9668e4e502af1496a91f545d08b56e15e92d6b9c36a59b5b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144491 Malicious code in local-odin-sync-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eaad6abfc7da0b2db8e0aa9cb3812e19c577a9687e15a1f993dc96e8488b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139812 Malicious code in await-venus-oauth-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12768900fb6531d21a6c7d38c5d1cdbfe8e4317e241ff500685713b38f7aafe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142828 Malicious code in ganymede-winston-enif-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f05b3b4884fda91ed4e5b87e250c8d1fd333f9772b5f001db3a8ff25f07b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141449 Malicious code in dactyl-postcss-slidev-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-deneb-umbra-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97473185bef024c93924990cbe14eeae502c2bf156a233ff17b916ea9c0aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-rigel-google-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa00510f131cb0ada6321519fd077233b972d1024a024d33eacca86d2b04e6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-commitlint-config-angular-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b14fd937755bb3ed6186adeb8bde0cbd8363c9578b97421772e07f4e77ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-middleware-yildun-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c01312d7a51a6887f36e610a4a95dafb006ef62146e9698eec917a46fcdf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144733 Malicious code in materialize-await-cosmiconfig-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d9c78b1503d4d82f8378f93edab2df4d30b9f1128f3bb265df2952e37843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...