Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-gemini-nconf-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6261de89befe399d7560948dc5c6cfa28a821c2887121fb8f9e613cc581c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-element-ui-apollo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df498ac200d33b3658c343435b76d30ef4636d8e58ef7ef5f2623064879b17aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cbb809a5a462eecb562ebf259496a3417030ea7068dd248d7c76664b049056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-phoebe-cosmos-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e66620c9fb8f04758af3a93aaa8632aa02f57abf05ef264c346a029a640b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-release-it-pyxis-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61773a0ece38bef11fd9b5fb4ad27ba85fae3abf3dcd63868c9fabccbc105b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-oberon-resolvers-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f07dd9d57dab6a0026c421c766bdfaef2aab35236f4b0373b185967b47b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-alphard-farout-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd20586f322a194db4c9b71f1e67da30870a5aa8e1a59c3861af98d3115e87c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-prettier-plugin-markdown-dotenv-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2d658f8b51340fa2613ed1642613bc96cf0ed9fedc8ea3dc4ca392be6f3472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145750 Malicious code in oberon-parcel-titan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9978bb4e3520033630c29d6f7bbdde1916546a107868e410565587642fa5b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143193 Malicious code in hapi-mutation-kronos-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bdc578a7fec9fd4801c1e1ff21a48a41a4db300c24f4d6bfe34230edd886b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148264 Malicious code in start-barnard-bellatrix-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca1529eb0cb56a1c63d39df7055256a40cc90641a5729e731162c15c16e0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146385 Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140869 Malicious code in comet-callback-eridanus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b1c7def9475e1e33a54a044eaae4b46a02eb381b65fd15acf6fffb661227f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140350 Malicious code in callisto-redis-miranda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c808404c1516eceae69b46eb674ec8d4ebd16b9fa71aaa80df85e7aced834f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-webdriverio-scorpius-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8974cb5555bcd7e749d58f52450f3aa78f5e62beb1db5026d5d8d9bdbccd42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...