Malicious code in repository-rigel-nodemon-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b245c5bad420fe8b658ba8fc96bf22f6279e86661f42a4edfcb8cf101ad1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140632 Malicious code in chakra-ui-webdriver-mocha-pavo-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ed3e1020926010b75f154fe516081b5794dc162baab1b82a75940ecab865b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148323 Malicious code in stream-lint-magellan-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd7ba78ae6ff950c86e95dd3e3febac32c90c13ee98faa58fd9ae9d974af8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146792 Malicious code in publish-local-typeorm-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4482cf83db452cdff612d207cc3d09e52fe887e377776f0cbc30a97f2883b914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-native-wezen-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f783af03f5cd53bdf2d57a926a7e3f1eac33d66fc2c6865ab531181c7f231f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-nuxtjs-titan-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0468752161bd7b872f33e88c5830b928b3ee82de8bc1436754100a420e88f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-chakra-ui-dorado-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9ac75f7658f7dccead98d47dab230ff1d8ce65cfcbb496cde1d3bd4272e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-shelljs-mysql-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d160095b072fe5c1f1c68de0e9a0cb000ff18e829d29172c19bac0398cc3cdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-dotenv-safe-uninstall-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc13b358ae761bf55bd16caa1893474822c15d72cabb164ab435a6625522aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-module-json-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a58ac085700c396f4357f3fa014afedbbe3a96714feca565e1cf83f5e1e5447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24286624def132ef9c376a35c74006cabf3598f7c1a32d194a5a9b4fdd37621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-tailwindcss-inquirer-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9036591e9b1e4565342333a9f63f66a29a2925934912d38bbf3c5ecb01d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146394 Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142452 Malicious code in fetch-polaris-loopback-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544bff7381c9dd2c0e1de48ed79409665cd07f2f3ae49b375ecf4ddd3545372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139183 Malicious code in acamar-perseus-rehype-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13b3b72eddbdd6b698b8dbe987a04af1fba5606494eadc3fc663de33f32e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142989 Malicious code in got-superagent-winston-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af67224d6ced20e78cf16853a62e8f18f7cb7583df01f4ed51adcce2de1bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...