Malicious code in docusaurus-apollo-procyon-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d68775694f1a02f061a9166189e1da1036c33dc0f57dd3bad87a9118563e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-redis-sirius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638c187fc63138815d26c2282ecd2223ddc5228519d789c20da754e12295f9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-orbit-dynamo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca30097d082087dd40ce6bece08a2fe444de12b0eb30b4dfcb180ae3be49a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-subscription-flare-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b71f9761dca3471306127175edf9b552a4c30366e83d5e3b6cd75902c0ef97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-backend-delphinus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56927550faff76fc83b82b8ee8c61abf5f4278b560fb1acc33b5f11b924971c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gulp-warp-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac3d1abd58eacd1aeab792f93f5e3b7927e722c82a03c0c3333f6692415fac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175791e0a2ba963a3bf01b4cedcf4e14f64712bb8230142a684a456e4a8b944d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-lynx-transform-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f627df8c289e0b003c1cc35af435b79b568976165f0a92a17edf2c0d94adb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145848 Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145433 Malicious code in nightmare-dynamo-meissa-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432e3c88b4f234e7077788b7b05eb8f49ef8c5568c00a24927111eb4f0c3c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140776 Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145518 Malicious code in node-config-sadr-node-sass-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9531f78b9c6d8ced2fbe159fa6b011866cef7d09a1509b8ae0f2ffbf42f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147057 Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146991 Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...