Malicious code in apex-aldebaran-sass-loader-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df72001cfaa988d92bc5c2ea746cea8608e30c4aff68bfb47d95a8ecd76cd633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-reveal-md-equinox-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f77ba08f169f2e423eaa7961c5975b6287c4f39ab74efbe97dba7ff08dd69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-callisto-ursa-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229943c5e9d79a2f0d941b9a02ebda9cab8fd22ad809ae3f4897beb3c6be0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-process-wolf-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5009110c757b0598a61838ec0b3547d6aecab8a31eefd10856eb59291fa0ccda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142506 Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2058169f40e2d8da83d235c589c131dee6270a5bd1a819b0edd9873ab06714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140432 Malicious code in carpo-blaze-dagda-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31a9474f1df423ea3245ee9303658654fd965f51550e15c0f71eb5b195443ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140220 Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141955 Malicious code in elektra-webdriver-mocha-xanadu-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dc7b351cfdfe332b731cfc5e306c28d94acf928ec0d493c81b06328d944a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141987 Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139263 Malicious code in airbnb-terser-deneb-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e88e788e5051d47ac4462b17dcb5b384b0f924a8510c377fa0fa5a96a5a2d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141253 Malicious code in cross-env-fornax-hugo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144081 Malicious code in jwt-nebula-module-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9bff033dd6f4cd1ea320753374935ff75fd394a2a0fbd8a15fcfa1243ddaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139878 Malicious code in backend-barnard-galaxy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59049d351727bffb49a3667c44626a812f06adf443b2fdef5596e01172355a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143669 Malicious code in install-betelgeuse-zenith-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a08b8d9f256af66e0829d46984add840408b56494c471b1c80839bea17a9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140931 Malicious code in commitizen-forever-kronos-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3e877871f76ba9e3d244d01fe8c0120005de9d90b3980e73de642d4dfc890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146453 Malicious code in postgres-zenith-gatsby-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f848a04c62462ebd013014e94dcd21fad1daa9a9bf0195d04d8e99c9c335dde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141379 Malicious code in cygnus-schema-pino-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadfaf6400f24675483af5af45b3679d0f5854fdf0ffca88edf168e4aea9ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145128 Malicious code in mongodb-graphql-atlas-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacd7e63f1a9f0ab9a4f16944690ed708c301da57c2b5e5b4d8ea0bea964a8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...