Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055ec0f2807c9f58b686c8b3747d316d6d0ca5fb31a450e20d2d6a57d9b1d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-stop-fork-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8f85fd8655a595a472edf9de22c502004bf3992a2e1d4e481ca097860e48ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-wasat-gacrux-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29e8042d28958d31f889469462bdfb23b076aa1e204eb5b69c1a441fb2ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142836 Malicious code in gatsby-capella-cli-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70ae7b409af968790cb31d4f80f53de02919a0ec8faeb9b589e37e0b5e2c3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141595 Malicious code in despina-express-indus-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169d8507322147c12e5ffd5c35633e28f481a208635b780d832dbaf2ed12dfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142481 Malicious code in figures-scorpius-gravity-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e254e05123db98929538092e918e04c4e597fa8cc159bb076609d7276a8c7fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139399 Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141475 Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146556 Malicious code in process-local-jest-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26fc3b03ef31a02fd7707e51d12da7af5f9bb6a697f7e24df86a5a5c306cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140363 Malicious code in canopus-leda-postgres-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16592b4ce6c067b6870d21abaf030dffb146d291061175fd9639b09e183061f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143276 Malicious code in hercules-commitlint-config-angular-neptune-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24064082095441958e9cb412eefb08dce7f9be0b9c7c34e364b44f41348f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141359 Malicious code in csv-subscription-apollo-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d87b5a1516b2518c854fa644e90a91b1a468ffd9573c8e3afdc5a5b68de7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144345 Malicious code in less-selenium-sedna-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d50b75b55fbffd0d612fdd779f342c49307f72c16e84063f96127158c2683e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144814 Malicious code in meissa-loopback-dactyl-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e705ee7641022af9a53f63bfdadeb16861e696f1ed1e6802ad91b6726cc24e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148371 Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139612 Malicious code in astro-oberon-airbnb-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6997cfe83393bfc484bd912e4ec6f64fea103f08c847d3a6502b9743d27e630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140670 Malicious code in changelog-hydra-hugo-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3356433052edf0929bb0319190aaf2c242a761080e1e2ea7ffaf1cbd44dcace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141617 Malicious code in development-cressida-sequelize-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d60ba7cda25cda3a3bfc8e15b4f112403cc1c5df0679ff03785c3356c1e4229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141080 Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...