Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed318452e4290638abbef91f54d51d2d2f0ecfc9073c4d399951524680acd6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186608 Malicious code in dorado-jest-gatsby-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9de4e8e9dafb88bdd63a361c5362004e17237ed4fcee7acb6bc660c15eecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188586 Malicious code in pavo-auth-sedna-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8d23d3284dfb5d8c816252d592abe31569453c9b4989f3dbf8910826ee9a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-exobiology-eslint-config-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7fbd22a1e96b35affa0f148afd128f06a5c0bb44fb6a1ee53d15e319543f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-parse-compile-sanitize-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67422c824f3aa72587863ab29b8cf8aeb46cd13d5f23bb7977637d0717d8e92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188725 Malicious code in pipe-resolve-signal-uglify-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c40780bfa0a60a0f11514d456c9de6b44db34fb75557dcc422ac8974ca8ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-report-pi-module-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eeae1ab2bbeca7c4cd632577cf6916c3401c525a645b193b91425590b719a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c89b3115fa6923864030d78898e8602e4c6c3e8398a4d8729c6a880b206927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186366 Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-asteroid-readable-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde9ee609c1893f744ce44f7e17918ae0bb056420c1a91a06cf22239e5736047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188806 Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a6094cb7884375f29aa9c5e2b1692a4e86007d59d0244ff7830c5fe19973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188818 Malicious code in primatology-middleware-planckscale-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c06a16d39babc5b879b4fcd7ca4b45293e129f38f2eb2e9bbd4ee8da57d0a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183042 Malicious code in itale-dci-ssetgs5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf6b97d6908918c21fff8904793446f2d63c2c7f133b3d566dc8164d9bac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184312 Malicious code in modiov-kifni-ufavcseqinsdxauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888f69dddbc6892456541b46993fad8f95453779d80213704cdd054e5da1bd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfgab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5305c32fa3f3a7587f64773e439f489b985230e0b62ca90e89488431955f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846bc35bc6c6c9d1e1c92ee618f568132036f11bc7cfdd4d07e176f657ae852e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184396 Malicious code in modiov-kihon-afat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392384c83b531491c454ece7593ef33a10cc9f5c39f53ccb93d17eac107d64ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179812 Malicious code in lookingan-jaja35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03d42e804b1eed9bedebdf69ae7210068411feaaa644aa19fb418b8a6a2d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179798 Malicious code in lookingan-jaja22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b772e4a8288aaecfb5f4fbe334b404cf6a0c89647614fcd8286ae06fb2794ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...