Malicious code in apex-dotenv-parse-variables-wezen-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9fd5bae6492801246b032822f7b75cfe47a3a5483a7f98fc995f172a9eb619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-xanadu-bootes-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a8e9f820d9fdcc7495d8be7342f3bc3b30c703f968aba70bde677cd39a879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sedna-css-loader-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ebf2af811d1202c068480a5d5d14bfd24d336da782807d0ce9b3dabb926499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145416 Malicious code in nextjs-hermes-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e952a6363545cacdbdab17a2bb4c64c953fc7a1614b65c9e1e5a18582cf3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149486 Malicious code in winston-cressida-pino-pretty-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3441bac52f6ab46845742e476292cd0397993919d4f7c7c5a3ac96275eed29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144163 Malicious code in kinetic-atlas-run-script-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab40e8a4f91dafe73f257a24987f8393097c2eca205847d0ee496bc84717881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139851 Malicious code in babel-delphinus-envconfig-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8046a5c617b1040dbc97962fa241b562a14f16e3039d8bc96bac9c765ea34405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148496 Malicious code in telesto-middleware-dactyl-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e618b3a34a547058845867335ff5346d818e294aad90c6623367b21f87e2e618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149390 Malicious code in webpack-bunyan-xo-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edbc209cd1ba1cab6f49ce0e8c5c7ce4cd297e85ac19b2bfff0c1c77377034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-mui-vuetify-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fea18858567d654b526efa928293815ed1c7b63c908f9fc3dc71e2f9f7ed1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143974 Malicious code in json-gatsby-eslint-plugin-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b7d24cfccff24043a5bf318d127b3dba80547a3c1e34d19ee6f55251614c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144788 Malicious code in meissa-altair-tool-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfcb585bb376fa6399f28e68f625a5eba7bfffbda84afbbf3dbf4877a5a221f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146416 Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140314 Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...