Malicious code in weywot-envconfig-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5293cbc3ab68ee5e40f6a3c2e9503a885bff68d163cf7e30570724b385c5336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148961 Malicious code in uninstall-local-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555721a317e20b9a35f22afd4a810a69c596a01db3cc09160097074ed711fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146143 Malicious code in phoebe-celeste-luna-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe0d0c724c25ca5f6c7bd0c954b2482889ae6065c56568136b475e39442706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144688 Malicious code in markdown-pdf-child-process-chakra-ui-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96d8d36d4e510dc49ae47e9de40c6c5fa597a27cd1aced5c26512e73abc5321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139607 Malicious code in astro-got-spectron-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999588a4cb52296bc68b50e588cdc7434b2f57827ce86ef72b7bf111b292cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149505 Malicious code in winston-link-sedna-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f85cafa20aa12c12ac18d6450f990058652fe350caf2047392be8836ab59383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141117 Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139395 Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143061 Malicious code in grunt-element-ui-sqlite-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e5be9b47f6694968a9eac77b11714a83793a8bb7e1fe43a9dea6c317f0e651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149575 Malicious code in writable-neptune-figures-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45124e351e80cd78250efde43533e5978c66164c5a2b54f3aec853be1434693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143403 Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6530f326f3a9376699cc3340f33a0ee974cd41b8673b2e9ce2bf4aacce3bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144597 Malicious code in lynx-node-sass-rocket-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72e145677f163af94a10b4643859caafade9742875b7ddf990815d974d4a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140692 Malicious code in chariklo-betelgeuse-uninstall-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1234dbc6ae148b6c7d9c6ecb253ecc1216b6fe4d01ecdc772f7a88426b83e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145875 Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...