Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-kinetic-comet-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d047e35d93dc96f143db92408aba214205928b1528c598917916a50e43055117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8446d0b83907d6840faf8bd380dda83cfec2d30fd3c7af28b08d939813dfa0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142238 Malicious code in eslint-plugin-public-forever-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141620 Malicious code in development-exec-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a304c47087ce6235ea11d67ae22402da93443f443c701408982475b773bcb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141949 Malicious code in elektra-link-postcss-loader-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e674a4cddae90ffa7220f43af1d7218a93cd063c9a449faa4714fed4383dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147666 Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-request-xml-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffd5543df0e4db9f532f3624ab9714d84734558324dc27ad9121b17db8a5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-jest-update-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c5507f525f0b7c13e0a023ac4998e1cb4cbbd33c5ed1721695fa1b08ce51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-fetch-forever-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f391ec557d8ee6b9bfce69e1b4b34811b1c8d9489505d4781de415a10601aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-achernar-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a04d98cb1ff32a8ed86064410e8eff0f1de7c3b742d7fd02bb1db5f63b962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143176 Malicious code in hapi-betelgeuse-elektra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cac274f03345eff3a6a95ef1daebb33b6da23343c6402e2c78753db54db027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146785 Malicious code in publish-gulp-nestjs-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8834abb9c3cfb987d850c0ba81ac464810cb8d694264d1778af4b4e97cdadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148183 Malicious code in spica-yakutsk-hapi-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad760eeb5a0198df33dd10c2f8895b2589e502fb5a1eebbde8b5261993b8a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...