Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-dotenv-safe-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc140cd2fda05d0c1a19dd41ec925eed3dea970a116c3154598788e35e8ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-antares-neptune-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc65152960b76a24c132fd022c57baa610440d27e99fd30117a7f067c2dfbb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c410beb76d57deeff1423e4a69bd221b151286e7e4b5237718fee546aad5035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143868 Malicious code in jasmine-typeorm-rimraf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a392fb62946ebfa7bf33c9cdc619ac1d918dd0e4e847bcf89234e2b4acbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148776 Malicious code in transform-uninstall-octans-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f86db654307c7cfc379ac92f24a6d4c504fbc65b67b3f390aba1f04cdec2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140315 Malicious code in callback-selenium-jekyll-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8ee9b1915c8d1e1c1a41a5527c908d328bbae16a69339adaa13e82ac138ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145657 Malicious code in nova-delphinus-npm-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129a352ca92f6102c391ab9f3a557c8fee171e8222da3bdb8bb217a365212865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146288 Malicious code in playwright-wasat-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6025a9c4a34d28d5fef4bf33d34d36f5441114184959e734cd7837e43332f066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148730 Malicious code in tool-cache-jasmine-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55861bd6fb59a0f1b7a41137e8a271d285b1ca827b491a6983fa3c6a4aa49fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145152 Malicious code in mongoose-firebase-local-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceadc074463bf36701cd49c234869395b1d563165730f2883014fd0532340a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148889 Malicious code in ultra-bunyan-cygnus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2e41abf9245703a734f0eec2e691c89b7d67a1ef3f53628e3b404f88f4d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139737 Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141323 Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139962 Malicious code in bellatrix-yildun-lint-staged-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcff6df8f297e1827092f1b72e1b0b0fc2247b2491be6414d2fb5a500a1639dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148508 Malicious code in terser-achernar-cassini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541cbd79218ff5344b593c40f24122914bc7da1ce7b64e3ba525419b25e42bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...