Malicious code in cli-gemini-kastra-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6605dccf94532fcc02386fca1e6f9054b5291a3e909cb1a0504204ee8be4880f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-commitizen-transform-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956d128813d337b1eff7b6337caa03611f4c893733335c524c0a1d4df948799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142217 Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147960 Malicious code in sirius-leda-algol-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fbc3669df0d35be47cbe0140850a63481a6f1f7446b8c464a7b5b0cad5508b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146534 Malicious code in private-install-radiant-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c3db67dc50d23af922b8b66d3017fe1f3bb7845987f6c590cf7c7b42b827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140686 Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145925 Malicious code in package-bunyan-uninstall-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927e4554a71f66a6a4f439906cade05f79691db231a52561db5eb5d1eff4627d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140234 Malicious code in bulma-venus-test-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4201069df227c6ed3a83016368b73803b06102600a6f33fd00fa86c969fae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143313 Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140147 Malicious code in browserify-xanadu-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf298ca186ab3969a5603ad79104ed7279f19d3e7e8a594f747ecf71c495d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142139 Malicious code in equinox-xerxes-convict-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8a218e391950bb7e213b36959360050fc42140f58484814757055dd9ca5a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141821 Malicious code in duplex-vuepress-ini-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a17ac0306d65a92bb6331bba707a8b9b14665480db55f8345b768c957e75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143447 Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146407 Malicious code in postcss-loader-sagitta-dynamo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1bd822a752ca9487e572499a5598de7969ee9e78acd72d6c1fdc286859d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147900 Malicious code in server-helios-pino-pretty-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d29159e5f9101d2b2a1a011bb106477bee002fd2bb59461e1830192383036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147367 Malicious code in rest-sqlite-exec-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd13f83bd5c46f13f990af7a80c4c6641d0fe204a19b36b862c00272782aa971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...