Malicious code in babel-jovian-despina-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2823367bbc3c7c96040c5a58d99c6d21a66d43a7f43c856472b6e49615b3b84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-ganymede-leda-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba82946028f26ae50bed848a88471cb5a5be888135ced1523e3e5774ad9f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-miranda-standard-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de1c22804477b569f6ef1f159cc4a5c33f043f873b677ccce8ce63cff938a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-grunt-gatsby-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a924f0426ddf06b8ef2466546109dd481e0454ec09d04bba7947208e692a7a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-apollo-google-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f8cf1a29aa8d3f79169df6417c3756d4d86cee205262bb3c9db4961245240b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149399 Malicious code in webpack-init-uninstall-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6471c91382e04439bad5add4efea64590c4612d7a34a262d27a4609557ada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-figures-karma-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e3a0d376b13715a52ff3847b5b8c3c11a9b9944d6df465841ca5029f962c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144878 Malicious code in metalsmith-iota-oberon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f64e3dc0efe6c5576461c566208ccb68e9e5cd7aa713aad83da487929f293f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144105 Malicious code in karma-fornax-react-bootstrap-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692a2c9da87e3f2f27a132a25c2aa343f1b3f5c7d705d7a5a74fbdca38cf1da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143859 Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141600 Malicious code in despina-nestjs-jovian-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc8eefaf5ddae9bf15203ad349315453e20013b6b374db712b239efdefd7ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143821 Malicious code in janus-nightmare-proxima-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142993 Malicious code in got-ursa-css-minimizer-webpack-plugin-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efd654fe96c6a67d87c933eca18ad2b34cf456480a67150d1a51d0b71d116c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144121 Malicious code in karma-taurus-browserify-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232bd8b8068a1ff13d4b4659cb36d3a3e4198a36dfc4c886d84bdf7445daa6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142902 Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...