Malicious code in prettier-plugin-markdown-winston-phenomic-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4281d2293ceb3511efadd83180a51398ec38deb67e510f1ee4384129802f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-norma-celeste-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1f52e88080d69c6d9183e4069ddcd50e96fdbe3fa96898b78f3491dc2649e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-pegasus-pegasus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818102e2d582bdb36b85162b7b70ce1601669eda16d16fde3bc826021de287b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pegasus-janus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22985f2d8877c984e1d165dd6767a367d4f5c8488e58828bd17fdbb35bdb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-development-cassini-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980e9d652b81daeb875482c3bb1b2e296302bf80c17586a0b77dd834e11825d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-rimraf-meissa-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa7d38098563bac4976b9449698657edc1056f58345ec7c9d7025e56c0ecf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-markdown-pdf-epimetheus-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e913e8e88606bad29883aeb6ff037fcb4ee1f10f0bb20215bf29faef5969323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-stream-jovian-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20405740772ce181d90facccd90c40f356cecd0738d253ea147949d065bcedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145931 Malicious code in package-ganymede-aurora-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e90255487efd08bc6f593e89aa88ee9297b0baf8b426b7ca816dacd1f45ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141933 Malicious code in electron-soap-magellan-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ccd77b3d326b562717c132e5824267c56c44d0c2fec12ffdbd096976b6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-webdriver-mocha-version-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3669afbf55ee3aa1d38f6388b3a66bdcf3ef82d8c1533706c7ce365b968efff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140566 Malicious code in ceres-geckodriver-hercules-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb881aa6de9f82d8b55c5c71440a1ab89edcf769011da63aebdbb2264e40ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-browserify-browserify-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5019fb52ca32d108a8a468f4c801ce7877677ed203ac920a136aadcd3625da08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142674 Malicious code in foundation-taurus-perseus-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0907b66f0151197653b0523e5564987d59fd908666612ab7cc3ec0f9f8f32344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140296 Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...