Malicious code in uglify-js-blaze-rocket-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5472177412ba005ec7b22767f42c1542b3f4d4f60fdd02d901c9d4defdd5ab8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-chai-framework-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fc75454b4d7fb05b9e18236f66515eea7bdf45689c68839a7279679c7d7067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-karma-barnard-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e688dc4b727f9d3b19915afd16b27657a3e39c2f63118c5d13e778f5826283d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148060 Malicious code in socketio-pavo-prettier-stylelint-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef069690a1512a2f00962ec60f16b54aebfe8dcef7955eb47bb0bc8bb4ee1b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143660 Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146495 Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b40a7e21ed9c73ea33d3e2828ad4a708c2484f3fe0ba8a02d4a89de882286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148801 Malicious code in transport-sass-loader-csv-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15bff463d0b7ddaac6f7bd94080eee2e9689b135e6550355ca6b8dc74134b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140863 Malicious code in colors-testcafe-uglify-js-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e77fb847e27eb950028a1cd40aca131cc9aa67d47344651081fc40be03e6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147809 Malicious code in selenium-pm2-titan-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a375b6e8a49525e6d29e4cea8e78cf47628833fefc78b632b4338ed37974e777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144715 Malicious code in markdown-rollup-plugin-quark-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa58f284a8cac376e8e3bfee0622f1478d5c0ee0e9e7ab7763a651438499b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144985 Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93c8482597f34bab21322649a57417242e99b962b98baa32604bfe83455ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141536 Malicious code in deneb-celeste-grus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f133612cb4622a9ff368b70b9d7c1d3a32e82cb081c81b65846dc2f0327e20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149244 Malicious code in vulcan-lyra-cassini-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be04eb363e087f81ffeeb3da0960053b654d947ebcd091091b9064bbffbfaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146093 Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144348 Malicious code in levels-adonis-wezen-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13590a8fab2724a650de948c25556f1e51813c92203258158aa6286554dbdfce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...