Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e85307e2ace34bcc68ec8b976c8a081530bd220b6e82e1316e2bbbbde27006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386846b5eb8ea17261166715d1b01f258c84fe3bd709898c4c45ac12b4038d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-pino-ganymede-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4dd6328527d6a79485918cd6d69b55a14c19020d45678be01530f3fd8b220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-rigel-lint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c4014a7c915155a3ac1b7f73f12460e96c04917dcd1ef4161954007d8dab93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-hyperion-wezen-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4bde97fb95eb8fd706bacdbddb316675d58a4dfe2637b9985eaad26c864b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143778 Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a14876cd051d8483ba0a279937b068a369f159a8e691f8a587426e0db9ded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142347 Malicious code in exec-jovian-perseus-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326348425a08ee48f3ba83ca62dd3f245246921fcbb76d6bc0f4d7fadca71fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140954 Malicious code in commitlint-blaze-rollup-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf36b483a8129794a54f0c8d1844c78f630daaa63863bc2ba90f9dca71b7166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147334 Malicious code in resolvers-rimraf-tethys-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45711639e7beefdcee4f29bb5ec283bd1503503b40991b0fe2acc470ed2bdd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149245 Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbac709081533786703a9d2c820cc05cc6e037c57d2336727371303e83624a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147115 Malicious code in redis-sqlite-odin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508b6ee75945f1d3e5c0620456e69c2562fc5be6e27f8f8e508184d955043ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143536 Malicious code in impulse-atlas-nightwatch-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a5362058eed500dde171dba02d815d28e096b76b666c352dc74d0a83129b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141864 Malicious code in elara-barnard-koa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbbdf075d7109a488c5c9b24914639e5f324c8f17792869971802a71e91a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147666 Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...