Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-sirius-rocket-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b239720987b2244288b57886086568311f5253ddb8d036fa28b57d806bdb167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-lint-kastra-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa350b2d4c3c265a386f4cd6b20c20ca0c9bee2e2e106102119c79f0b582dcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147806 Malicious code in selenium-mensa-xo-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fecc8fad9cbba384f0222c2b9cbf21220083ecd5a1a258e3cd02eae7a83b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148085 Malicious code in solis-sedna-loopback-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557dc7a79fcec22550edb2484b4642de358e3bcb886a741c248d597a992bb19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146800 Malicious code in publish-phenomic-phenomic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a89ad163831682a4f9c393633188ef89b0371d75e58767e815d7e03d8bec4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146172 Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144371 Malicious code in library-blaze-heka-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51b8af5044f50a93459386244d570c089c10f5bcba81f155c01e484f9c28712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146822 Malicious code in publish-webpack-configstore-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa837eb1c0466d00c69e8afd0e42d09c3bab5399f484e35f736cde5231a9dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146085 Malicious code in perseus-express-playwright-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb17399521f39eec5d3c3f8c312bb8e5218debe3c4ad158eecd500a1806e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142344 Malicious code in exec-indus-quark-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeff126d4d9dae822df5c1ba07200edc2513a45a3299d7100ab54cfe4c4a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148087 Malicious code in solis-spawn-vuetify-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1c25e4ff43497e859926f784162a09b2dcd843db09507d4116ad823328901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145534 Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144872 Malicious code in metalsmith-celeste-commitlint-config-angular-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0376a45c734849b50d9ca63bf94e4880e62e9bbbcb934434292b8d5b942a3626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...