Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146491 Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb1748075fb5d329a6781bb4c8df60f4842b6036cf1fa90580bdc0227b1a42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-wezen-ophiuchus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963978e738e91b8096361f2d0993dbf63b1c2007be9bf4deedfdc91631600f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140982 Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-protractor-eleventy-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f19574aa3d14f05d94240a6fce6061b983825c655f6ce6763b33ff9bd4969a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148813 Malicious code in triton-dotenv-safe-typeorm-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6431d75faece89bdf15b8f09d6765e8eb9c3f95eeb2c4b6c1a76c4d26dd91391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-janus-aether-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce5f408158a22ae9ab0a73f336c45a653252c9211ad2147a279babe6f3de397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loop-uglify-js-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...