Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149605 Malicious code in xanadu-package-cygnus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa2d250e72977c2e74b7ab03029d46a6ede791ea7df99c5cb30ab2ffc417dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-public-commitlint-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86828810b79ed18283b0b316575834d8a621b042d5abb7821c65806ffd04bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-puppeteer-epimetheus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def9be268d2d926abb82e79f1208f2966efb28383b0247f0e9aa11319cb8ac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-tailwindcss-helmet-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ac99628cc463df34bb5966523d40dedafbd2d76d2036558ffc840d3397455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-cz-conventional-changelog-meissa-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d19bafe3c4b592b1e829c62a4fc067747a9322300572915c4be2b3330aec9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-flare-warp-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca4cdffbf74fc39997178a3df0ce4e717300bc5fbe041fee70bb2ec0a90113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-sadr-commitizen-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2458790d8a94f3e458db7c76cae20f1c9bc1d93ef09dbcc916bf4b8947c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-playwright-webpack-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65a6262100bed5290dd85a48aa5f7bb581761effb44cc49ac2311ea29a74b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-venus-sails-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2233a552474c5eed5adf76810c6bdd4302fb6368b7098734f8aa7a3399da5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-server-mui-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c123fc1f820ef4f5e68ea945c2a2a7c074788b2210b979790dd54b81cc1d2ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...