Malicious code in rollup-barnard-cz-conventional-changelog-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc311119fbf3791737da30f4740a28f3f99d6a3c94ce3daaf5c30fa1137e196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-xenon-nashira-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d619d3ec1c004b82174f5f111ee6cde591c36b7917b4e041dbdba08bd61a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143738 Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149387 Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149372 Malicious code in webdriverio-indus-puppeteer-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0e3f43d11407c4967436f5bdad502a49fa32569364004308ad2437a3c249e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148170 Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139631 Malicious code in async-node-sass-fork-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563b15c57dbd0d8f2aa9a0c5dac2700b4399d40d423efe59eb7f8dfcbf879699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141798 Malicious code in draco-wasat-miranda-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133591 Malicious code in free_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b12d275cea2632168fa77fb4dce906aa189ce629618f4b26b1fed83750e7f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff734237a2b022407ca20b57b2477b4c14c82f403b95816c9f0899d77269ed34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135410 Malicious code in mahesa-tek23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3830ad9de29bc52e7e3e00db24099622d69b6a91adb5857cdbd1fead38f17069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133766 Malicious code in gita-bubursumsum79-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ad5ebf59d5ed7bc3240c03fc74b6966bee9fbdc9676132a64cdd0db27af68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132688 Malicious code in determined_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2ef827607dccbc95973e69f943ab79c96f9d67ef4ff0de6bab22af7f6d336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138414 Malicious code in zain-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1755f3a04bf14e1a8d1a6563b00ff4a089e7c6e13ef475272e314cb51e2e8e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136742 Malicious code in rising_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89e16f5f07c003fbe8c804b534aba53792682935d3addc6aa40236826286ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...