Malicious code in graphql-vuepress-husky-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a037cd8a29cee819de1acda0627ca6eb3dd4baaa96f2d401b83c8f7846c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-acamar-ora-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79491fe41ca22980491277a8cb5b34e805fddf15f0319d9c1ec3bd5090dc91e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-bootstrap-middleware-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2974c16cd773cd26b237ff38d91f6da9c867db0c7fe37f118599e7495cde9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c410beb76d57deeff1423e4a69bd221b151286e7e4b5237718fee546aad5035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-websockets-iota-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3366cd78a51c22a06baf1fb6daafc61aff9b06706b49c03a769c4f3c12811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142985 Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-deneb-schema-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f46a774c7288c4cc97d52bc84d10a0b31b9feedccf4ebf3896b2cc9e478509a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-rimraf-kastra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b55ddb30d6596dc7380f3c8beb99d07db1416b0ea94a2c64fb705fd8ec03fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-eslint-config-elektra-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a392c43ff4b5d26b28f817c91d48ec99b3a788b71d5993ba035c26f35df3e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-wasat-mui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67695877214ff48c4fc1c196418d5475b734d603d098d194a98f5b7568894fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-soap-winston-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146373 Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-nebula-metalsmith-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa52ef2c5183342383256462ce7bd6e5e0e14beb32eb9bec251155258b0119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-nightmare-lint-staged-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627490188d624c735a848cb635dd523cd82b8e5065cfadc66d9f3f5b1b727be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-bootstrap-fusion-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db0901dcfe0ec21abdfa6971f69bc9c8ce96784db98d3162ae004d12cdd6a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146590 Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-mocha-colors-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d2e4560974c6e97509a5cc24fa70ae6c81ca4d820ffda5d7c4ca31d2a52876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...