Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-quark-dione-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c70caf0a065f874b094b56baaf0fe4c06c6faf90160ec6d14f3e09e716d4c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-mira-sequelize-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8fdb4bf11f99e7be621461ac8b968a5c58220d23b06cc0b8cb5fc43f71f98cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143810 Malicious code in janus-firebase-postcss-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139831 Malicious code in axios-javascript-miranda-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f51a91843912d9a042988b80cf5c9feb3a9a0654f7bfcf8ac595a001837f93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147097 Malicious code in redis-despina-process-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d131c3638f6345ec221581b8ce4a623ecfb2824063cc59024b84fe71b0cd0540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145161 Malicious code in mongoose-nextjs-tailwindcss-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5baef566e823735372d309ad6675fcc3d0de68e618834cdc3931e40cf8d36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139908 Malicious code in barnard-hyperion-warp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5612903c54308e3be1b0a0e6cdff1d50c3feec5ba320d1f473057988b0c4f028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142628 Malicious code in fornax-izar-wasat-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdcf71c58e12eb58143158465d0abbfb2a527538d82e6a1d0741aa5cccb300d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144582 Malicious code in luna-sass-loader-centaurus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2278034b7ff68a8192cf1094d25a5a2c99ad341cce263a582564d4c2ef488cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143355 Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-transform-callisto-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6aff6f665f5d65e9160b95c96f0f11f50c7be5f51cc556bf3a6bb92a1f1324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...