Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-markdown-titan-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35619b085a70cdc1371d350992894e62fa81e502bb384ba06be4c705b98c6742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-publish-koa-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c65c1ef134ce232577df13d5b79811447fe487ad8ce6ed524a8d47842e01d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-semantic-release-atlas-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d18dc8dcc795d30bc08edaf90ad56deb686efefb24e1006e8391463234d5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143229 Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144588 Malicious code in luna-xenos-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145467 Malicious code in nightwatch-fomalhaut-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8383b61773b5aa6e2d7e266beb1e5d0d03731d8d57cbef93747ba115ed2749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140249 Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144713 Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142594 Malicious code in fork-mocha-yonder-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c491513b6938921ca5241a8998339c02828360ecd28a9321d7c0c9a7ef54ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147690 Malicious code in schema-csv-octans-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3ff1d427c6dc5249ebd942a1b207b0ea02860a4d1ee16fa12badf4b8206eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149063 Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...