Malicious code in node-sass-sequelize-init-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9820827f29fae3624ef8497c12accae1a6246f1b4a7a18bbfcaead007b9200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-link-eleventy-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ebc1e11460b446c5c5307ff7dc44ff2b2888e9c27a939ba49a5527c724633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146249 Malicious code in pino-rate-limiter-nconf-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2007d321e467534524557879fce285a8b90bc93b51de29e08cc7ab4b7383440d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143107 Malicious code in grus-vortex-astro-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61e3280e1988ae1427e0687e09494aef1d2eb0292075f75ddbd7458039d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145150 Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141615 Malicious code in development-changelog-publish-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba5a3360f88d40dbad8ecd7069fffd546d8daa1e0992e70276075c9638951b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139700 Malicious code in aurora-juno-grunt-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b678e6f76e896515da8263350bb2c055dc7d0e32726f5a2066eac0f4cc0124d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144436 Malicious code in lint-duplex-bellatrix-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4663042e0b4372b3db047434410679341e3cff303841a5caf9c0c5924b813170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143078 Malicious code in grunt-vega-deneb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf5f5efeb36f11ed5f3666ef5624a5e0ff840fe8020a24130d5693875258221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143331 Malicious code in hermes-webdriver-manager-atlas-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db68c78a636534602b31a1aab16daef84d3d2b32947a76810a94b4633a78a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148842 Malicious code in typeorm-css-loader-draco-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0ab1c14dfa80189445ccdea78b141d5d38eeef4d772c4e65ddad170d2022ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148379 Malicious code in superagent-cross-env-csv-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c342fb3e60fa2afceecf9082d7c1b1dea1e6af2b2fb452d854bc52c3d7d9892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145154 Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147855 Malicious code in semantic-ui-pulsar-reveal-md-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a80d995eb8677aec2ff6f9f1e190ddc765ead947e37559d1412568a96be99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...