Malicious code in config-meissa-norma-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-apollo-postgres-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c504442fde8f0ce95ca21f1150316e44ec42643db293dbf940a6307e028fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-apollo-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145114 Malicious code in module-polaris-scorpius-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7bb7acfdcb632979fc61f489d317fb02be5a72204d7cdf76e8f71b46d146fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142587 Malicious code in fork-eslint-plugin-procyon-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6096faa5e10b2c385f98c2600967ae8fad4414fce255c69a7c8ae1ad0d863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143864 Malicious code in jasmine-query-yildun-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f632a3252972241dee863dd75f02b97f510ad5c332e9f6ff8b2dcb5eb89a139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143810 Malicious code in janus-firebase-postcss-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141478 Malicious code in dagda-nodejs-magellan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144013 Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145083 Malicious code in mocha-karma-canopus-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ad4880670e7c06a9008b696f011e6661a4169c72a764fd4838909894448233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140650 Malicious code in chalk-miranda-stream-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49e37c6859cc4ea8aaa71c43a84df6a1e639a482bc71eac042856a46b547299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148650 Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143720 Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141750 Malicious code in dotenv-safe-dynamo-proxima-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf0108e84f53753f904008c725f9be7074b48a81616931a5b4f4ed25e980cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141952 Malicious code in elektra-start-apex-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790a71ba3029bfc046b1f39c6c9753d363a6e0440f4fcdad8cde7fb6f327312b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147471 Malicious code in rocket-jwt-webdriver-mocha-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9151497ee42a404985ad654d25c422daec606cbdcf1cda3082361994b63dffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...