Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-auth-nova-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e345ac51f637602bb21180a5a15e0c808801e9c9c5860e07eccb477eeb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f527d979b805966a29c97a0f6ba24c8df77bbdf6e19633f45420bca5790374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143736 Malicious code in iota-orbit-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca1f11bfc43988fb9609e136bfb0d522a271e885abb7654c703b5719af059ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147522 Malicious code in rollup-plugin-tool-await-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84775349c8dc193168951bad5cd88c6117e804d988fc3254f234eece5555482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140167 Malicious code in buffer-pavo-europa-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511fadca6bcdd76abc46c84433dda6cdbb8f5941abba97253a8acf6946b7cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144254 Malicious code in lacerta-warp-perseus-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d114be1fc47db70d408c4ef91f54c6e59def37f58a787a130bd55786b6671395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141990 Malicious code in eleventy-aurora-csrf-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd61603a8d9897e58648607455671c4b3464648f4a3f11093edac31e0a73c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141410 Malicious code in cypress-unuk-helios-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4494f554296131e81f71e10c287e9872f5e5f8d04ec26052b06527d853f2d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144035 Malicious code in juno-pegasus-pegasus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818102e2d582bdb36b85162b7b70ce1601669eda16d16fde3bc826021de287b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142887 Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140855 Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5537dac183ddea56fe80ce29f10e2395b13fd7e9a0c8af926ed0e4c2a5b4a9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140439 Malicious code in carpo-elara-non-blocking-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9625c431cce9029212fb9accd6de2599b0e5c9279e513c0e674e8544d0549f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...