Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-passport-module-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5741b69073dbce562dc456d306b14a68f27c7c3edea1b1cab27299e4d3b7ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-node-sass-deimos-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529397a0c3925e7719a49c6d9735e9ee960c0211188a69882b13263a692e1931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd303f21515f0dff1bfdece8ef5956735f37b53c0ae72f27c2547c01d44b88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-graphql-figures-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb47f0ad8eea6799be93d149bf247a1a3f8541ebc3371cc72f9cbb3e8c3d9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-changelog-xenos-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86aca0815621f69cf5d331bc8091efad1fcdce25c829787fc1a4df33c99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-eclipse-supervisor-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebb5dce4cc6bedeb72dcfda54697e0c1ee9e4ab70e6f7c8640d9a4aed1b1e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149553 Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdaf001656f0e8395e386cb55cbb4a6a0e6fbc5feece1f143c58a49d9e4aa760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145448 Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...