Malicious code in sagitta-link-cz-conventional-changelog-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb351a808e39fe6ca52c7d529df120e541435ab8307449414163e7ee7d6bf623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-chakra-ui-wolf-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269da6563955e8aa8cf275cece8a94fa39c1f1923c676949f24a6e7dd8eb9879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-testcafe-toml-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a440cd57546a04a8a84419e52d295a653a4daa9bc232f5fb240bf5b9cf716493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-slidev-webdriver-mocha-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3f5dee4442b78a6579d6e4fc130a2f34b0cd82a352dd4c98429da5cd949c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-proxima-library-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e290981069fcb3fbb09a26760568a295e5352425ef1a2aba07e44b744be012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-meissa-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aa0eb53f38046acb51de930d7b4ee46451b9bb5195ebda094eb86331223a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-repository-cordelia-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ca10128ca1c595bbe11962c6144feccdb2b3ab4f06fec3de750790066d5095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-superagent-hydra-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4642c3f8ab7d248da3daac08d7f2f06935af9afa6a749306e9b8fa8707d54c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-prettier-stylelint-private-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf2aae22b646299d21e91bd273adb23525d3c1776f29b1dbc9f43e9f9a0199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140049 Malicious code in blitz-leda-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095653f9eb37e46f07cd046aef238d9dd31554eda3b3b758f09f0d3d76c2d31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140931 Malicious code in commitizen-forever-kronos-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3e877871f76ba9e3d244d01fe8c0120005de9d90b3980e73de642d4dfc890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139873 Malicious code in babel-standard-nightwatch-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3bbf98de347e5fbf986b9ea736e9b2918562ec8c586a4d122711b09dbd8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142112 Malicious code in epimetheus-uglify-js-figures-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141352 Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145359 Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141253 Malicious code in cross-env-fornax-hugo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...