Malicious code in winston-pino-pretty-parcel-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf34adf731cd0173b3fc913fcac4763e84f4cc5b9fdc9f8f64557546928e3e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-norma-cygnus-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3caa6e4c2e2507da0368799cf63920ebb608711b7a6709e9862ebb27c11a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sirius-karma-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8239a69a23cd612adca0dd924c9b3c85f4af6700bcddaef00eb69de95fc6b5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-mongodb-phenomic-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a578d2d7e5537e4e062495c0e294002661cc51aeafcd9ea38025413e2c2c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-ultra-centaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c0db9ddaddac7633e63071583d00d82037f15b75a57cb7b68e460390a99a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149210 Malicious code in vuetify-fornax-equinox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5529f7735a79897751ccb1ec6b14b80cd2211f4385b705aa95822ea96af2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141396 Malicious code in cypress-cressida-altair-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7486750904608a35c875cbb4bb1350cf6822adb65f1b079b7e699c06a659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146822 Malicious code in publish-webpack-configstore-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa837eb1c0466d00c69e8afd0e42d09c3bab5399f484e35f736cde5231a9dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146583 Malicious code in procyon-commitizen-transform-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956d128813d337b1eff7b6337caa03611f4c893733335c524c0a1d4df948799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140900 Malicious code in command-elektra-writable-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444eb6f58e2b31a80a7f2384e1894fea97a4fd4d95cfd71d677a69cdf909af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142062 Malicious code in enif-sails-less-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685f6778dd1f66ee5adf035170fbead67b325c14b41ea3a88427b4318720929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143245 Malicious code in helmet-blaze-eridanus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23f280c4969fd442a925326b4a70a71af391c3ca923f2f2784d2aeaec842b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139736 Malicious code in auth0-atlas-bunyan-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342ccff9c90a37b95f109a686f983a092bbaa10d056793b078819132e688deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143230 Malicious code in helios-europa-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4467f1cce390ba3c5144631bd0d5d727f271666690fb351ccdf4f3dfce29e96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147747 Malicious code in scripts-semantic-release-galaxy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc373eff89a8346915f7e86bdbe978bb844ddf27580d6e384ee21fd6bf5e29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145873 Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6439b7ce4ea1a82addc322dbe28006949576155483944ee12c33702ac41146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146021 Malicious code in pegasus-chakra-ui-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7be2d5896071aa511b4fddd7bc90af4dbb750cf4dc6aae32460667ef98b4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...