Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143780 Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143191 Malicious code in hapi-miranda-changelog-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66180cc95ece5af12d457fd622a3af203c17b90bb2ac5a47ecca155fc5308be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143694 Malicious code in io-elektra-chakra-ui-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec836c25be7c8fccdbaefff9c32a7db893a66dbeab6e8597a1524652329167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139180 Malicious code in acamar-npm-fusion-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d95af17c88ec72811f0222e34d822483f1989fc44ddbded8ed3780ef28b976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143639 Malicious code in inquirer-betelgeuse-perseus-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af856ce8424780e448bc2e4ae72c9e125282095bea8380baf39f32da29543d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142411 Malicious code in farout-fork-aldebaran-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e364c3a72ba84354e451e03216e5cfc26e6c2e5e436f26055b6f868d5a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145479 Malicious code in nightwatch-pino-pretty-publish-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a1c951fc5746b594ffe7ddccf0b1e29860605ad3eed07f5b638f0de0cdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145950 Malicious code in parcel-aurora-pegasus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850d9ceb923ea3b8c1fae4e07e33f2a81a4e2efb322eab5c70dcae054468a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144980 Malicious code in mini-css-extract-plugin-meteor-capella-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2bffa9bd292d3a0b9290865876b6ebc6200573a041491ba008385a5a036a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141182 Malicious code in cosmiconfig-gemini-wolf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bd12bb3be8b01b050f726a8cd093fee2c9c5ad5226ec9d820cc45f66dbdc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146514 Malicious code in prettier-stylelint-odin-hexo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-uninstall-gridsome-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f954fa08e9cfdc70d1689fbc6fdcbe6345c8f370b417e6f4076219b77cdbd9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-spectron-transform-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7699ee15c3365e2d516a2c2c0477fc547aaf34fd773ef8b4137ca6cf01a765af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...