Malicious code in javascript-readable-fetch-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3827cbbd47b302e1ef59e4c94ec650165f357e5bbd37b488b09940b80b763a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145573 Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147611 Malicious code in sagitta-publish-less-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31faf24c46477d774d93db7d78b3c39311f6669c9cefc0ff371546695dd8b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139823 Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5adb38887f09011db745f6642437e47823d8099f72287dc1c786e7a899d187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139506 Malicious code in apollo-dotenv-safe-adonis-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcde924ec26f252d60febaa53742a5d726f948b604dba32301d3f6607eeab559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142345 Malicious code in exec-jabbah-dotenv-parse-variables-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e8bb99a6b90325f806202d91e9a281f5936e53f6977ea1a234810981987eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139308 Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141281 Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6402077653de7905967491c9e1aa4a9a1662661767e24f36434c2d419174f1b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143731 Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146333 Malicious code in polaris-csrf-solis-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba790998ac2224443eb8c2227985b455aa02d7be390597fec0d0f74cb3527b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143897 Malicious code in javascript-zenobia-procyon-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d17c7d8410a616312651adc3f3ef897cab68befc9d997b41d73c3f98dc7fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144860 Malicious code in mensa-process-nightwatch-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f0262ed9e2a8e84f68ed2b67789ba79c7a2c3aa63a82cbebcf527775b5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146491 Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb1748075fb5d329a6781bb4c8df60f4842b6036cf1fa90580bdc0227b1a42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148794 Malicious code in transport-nextjs-antares-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94ea4fddbfb6effbe5c8dc54b46b9cb52c22ec411b07f48aaa7352efd7d359d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147935 Malicious code in sirius-antares-quito-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb14f1e0ab037152d92b6e9a004a7710057e78b13dea45ab58a2b501256a79aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...