Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-pavo-meissa-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e8b50a01510c3c6be8781d310dad533e91a7fcbfd0957dee87343c3186492f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rehype-norma-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd213bdc423b2ab5c22eace93f80c095bf7484f442dac2efef9cdf02dbaf54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-postcss-loader-mongodb-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1901883a12e5906a3aa40a43f8816c93e38fefb894c40b8271a376d5bb6d12d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-carpo-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c64d1fb27cba87ba646d04d099537d85a8a5c7d5ff55ada320a56a2e70b9798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-convict-element-ui-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2a6d456fbc4d3913a24553e903f83cb7fd4e63c4e3f8e5a5860b913c4a9b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149596 Malicious code in xanadu-fomalhaut-umbriel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0060fea0540af3890337ee8a42aefa2ed30ad48822bfe313698e497dc0b636d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142440 Malicious code in fetch-deimos-acamar-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b897e3a9820ef17d02f095ee4115b692e66dbcb446858ff17bb002112e015788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140348 Malicious code in callisto-quasar-dependencies-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604d3dacddd158e06c565b4ee035b92a9de3a096a10283e17147509ac98b4380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146973 Malicious code in query-morgan-thuban-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebe6c980c00fa33efff3d178e6e90aadb55e1737e9f3429f9ee185c7f6fc816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147258 Malicious code in remark-wolf-jwt-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd162f05a085a9bd6f3d5eae4eb71f22530b58420b2769e141f54389dd035c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144646 Malicious code in magellan-markdownlint-concurrently-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3be4e484f62d2fc2a90189330282e1a805f14b6990559ace653282d90529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143828 Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149728 Malicious code in xml-bootstrap-dorado-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdb015ecf00beffa2b70e8640ab4a3486fea2e8588cb0a536770dca69486d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-regulus-standard-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b79aa20c071020cb69b73da114fec202dd668a16bccd8e67a4b0feea625a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146398 Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148661 Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...