Malicious code in docusaurus-draco-jekyll-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c9fb39babc5aa2dd69c5b084a9258b783e750089a95ca625524bb4e440d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sedna-lacerta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1e497c4a4276f35faa02b0056417115ff74a8c7698fcf9124ddd14717dd13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-passport-oauth-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0379683791185467ad7509ea141414868c93f65970bda8b65d73eee3b931f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-xerxes-phoenix-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa53cdb21883c83010f5b066e9c80d22153325969ee802d62fc3eaa81e6b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145024 Malicious code in miranda-capella-electron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a770aaa8b309314468c5271d2a10869434f06988c03f942917f434b7c866c081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149006 Malicious code in upgrade-centauri-query-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3af104c42cd1e6c28d871a3de3cda443af276c5ae82679a43424867c39f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144914 Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147112 Malicious code in redis-promise-sails-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db88f5bd46027d67ad0ed24f388c807c604ead21fb1c352fc07dbda7be2f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140948 Malicious code in commitizen-ursa-figures-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d2b2b10f8fe2f0581eb6d7fbf66437e6265cf09e3d3bd6f0e3e5ac26422761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139371 Malicious code in altair-umbriel-child-process-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c96004ef35148074e4c1f1adf0efbb7176c7ef4fb1b958d124c0ae97eb3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-jest-miranda-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e3f11822f69cc3af5103540deaa2a91bf3bdeb149f75822db55827184c9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-umbra-got-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc596c49c4ad9d9d07157ff4fa1b8000bbe0213ee0fbf7f7bdfa6f7b8f7b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-commitlint-config-angular-foundation-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e12afc2824b46e6a521eab36252f75aac971211fc61578c98a536968a72429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-pyxis-child-process-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8266f3e3b1d69445352e920f258de0ae4c53efdcb390390a11291ce23337a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...