Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139641 Malicious code in atlas-callback-xenos-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa94b81da2f4a6f4e376f64baa173570ef405d5befe2d774868143eacb0c594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147498 Malicious code in rollup-global-indus-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79361108aed6e40411d643c21feabdfd09d5e67872f95b55d72cc8c3d6c230da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144120 Malicious code in karma-spawn-webpack-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ad02d4f568f1f8a2b8334848d681a29dba0cdb833d11bd39f564c54fbe6bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139868 Malicious code in babel-pegasus-xml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139785 Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1bee846b0039c60e0e0057b6c29b031b648b21ebbe632243dafe96452cfc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140210 Malicious code in bulma-config-kinetic-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22186b486a169f8eb3e7f635c7232051ec48c4b08231c118f086dbe26e97a700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144846 Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148711 Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142582 Malicious code in fork-cordelia-gacrux-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5df5ef2b61b37688c2f55bd46a28cf1c268628a6e43f3c21b47bcd8b8596d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148439 Malicious code in tailwindcss-async-dorado-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a64b7109b43ed1c0f9e482fa31d66941c4902b2c0b896b79c946b9f4802507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146511 Malicious code in prettier-stylelint-mysql-ultra-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b072f90d39311114a92c9e9cd77f1a7d23ef5852c232fa6265d3263e30e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149037 Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141413 Malicious code in cz-conventional-changelog-apollo-europa-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a374729d98d86f3613bd69ea8a7dab54201ac5cb5daddc4823cca64866c8c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145544 Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...