Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141132 Malicious code in cors-registry-cross-env-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097b8707ff937202a007e6ec522d6f0159c12a69f763bba77779bf43607923ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145335 Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144653 Malicious code in magellan-mongodb-fornax-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70598d3f2d4714da0773553f94b820f5a8c58a903b861bd575151ebcd7b0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143331 Malicious code in hermes-webdriver-manager-atlas-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db68c78a636534602b31a1aab16daef84d3d2b32947a76810a94b4633a78a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139700 Malicious code in aurora-juno-grunt-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b678e6f76e896515da8263350bb2c055dc7d0e32726f5a2066eac0f4cc0124d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143924 Malicious code in jest-forever-adonis-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d466745ad211662ad71e05f6430482e9219000c7fff7777119024dc32f19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144213 Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148036 Malicious code in soap-style-loader-eris-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f7f664c484ea742bbd7f6a882a256aafd256ac26992f9f0430c55930c89642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140194 Malicious code in build-triton-webpack-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0445dd59b462201888dff87507cca5d90898111de33c352dc7250b9b0426d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142970 Malicious code in google-testcafe-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b892143c28a050f926f84699d2be8bb573669adcab03b0d52a3668e709575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139377 Malicious code in andromeda-enceladus-prettier-stylelint-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4ef2f98ca49c6d905913047175855f99e997a9f886a2b141293ef331770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146263 Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139697 Malicious code in aurora-chai-csrf-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-eslint-plugin-neptune-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05892523376040a7b321ac3278985edf9c519d65ebcbe687651dddf10f1f85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145340 Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...