Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8d6e129f1fb2b77342ec6add65d3ccbf071b23d65893e28f8b00c0c398047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-hapi-init-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a589dd8251f7b312b8b946a84cf1993ef7cfbe4e05c8ccb269fd98890e23d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-flare-warp-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca4cdffbf74fc39997178a3df0ce4e717300bc5fbe041fee70bb2ec0a90113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-sequelize-antd-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19828eab2f701ae359759a95b517b23ff2544256a38e814ddde9e68560f5c8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5d940e6adbde6832d8047a00e567ddc3ddc6310eb5cb88dabddaa419b8ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-rehype-sagitta-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef357f0f0dc562b08c3cf8f51a92672a8a6aab70dcf038eef02ac1f1eede87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-less-pino-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5142e8f25eb8cb84522138e3c98a5822cfca19eed6ff6a0b8f0608fa00c1687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147717 Malicious code in scorpius-thuban-algol-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172742d80e37714777ceda6aa00d46d9e5c6c0f16d5f31980d3bde53a76abd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148919 Malicious code in umbra-fomalhaut-cypress-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e610ac0879d7d61e6f41f0587dd9f753775a9d82956e80f4a8a486ae1f56d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145297 Malicious code in native-venus-kastra-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af819cc7c6039a99830cec4ec922f20689dda1cdf403e00756c32a48533001a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149875 Malicious code in zenobia-semantic-release-wolf-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f347b66bfab2ad3cd77af9a4c71ef499fd706c4458d617d5e954fd3e277f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140209 Malicious code in bulma-command-betelgeuse-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32bfaa4210000595932a3d32a2a18a8f1c906c8a7ee33d81f2ffd1ac11a306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149836 Malicious code in yonder-docusaurus-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7d9ddd9b0082be83bb6499eee01a3e4626c773b70f7731ac99af42a83c4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147598 Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147604 Malicious code in sagitta-luna-uninstall-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f782191c278c6bc57c441f785dd87f2e95bd22c25c583321e8ff771f44a1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147804 Malicious code in selenium-hercules-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc938ef30744453595cc43f857769b3c672e59f89307afd341e5f45796c71534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...