Malicious code in element-ui-postcss-less-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11f7dcb4ad8d3d253c970e41541c585fb88085c98c421b82c65f7f0453e9fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-playwright-lacerta-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1208ff45dd006a097793072c093d443a2de50d88981ecb93b4111e96b46ba2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148760 Malicious code in transform-cz-conventional-changelog-electron-builder-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a8a2acd4f5979240d2cb94b41ff2e23f5724b9ccf8109a4e25260841a8fbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140224 Malicious code in bulma-phoebe-zenith-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081a2ffc47999af7e0aae30f3d30a70747df95d6552443550b349698fd6932d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140498 Malicious code in castor-weywot-kinetic-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605d01f551afbf8089d533da8ae43aadc17b013cf9d50c733fa3813e9fe98845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145142 Malicious code in mongodb-vega-nova-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f5aede545d21e5540317b0eb62b4a423f1bb7705ab2a8f77a13e7438ec2ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144628 Malicious code in magellan-concurrently-markdown-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9abaa4ad316f22936dd5b88b8155e088efef33268c84c604f46a073977c2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139545 Malicious code in aquarius-phoenix-prompts-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf63d6475ca1bed3cc695752f666b267fc1e3cd535f07dfd26419bfd634965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143887 Malicious code in javascript-postcss-loader-fornax-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a46307816ef7e2a4a5c766bce7438cb607b945a2cd4692da71b738b8332511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148782 Malicious code in transport-cressida-sadr-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632d8390f7a137232ada996173925b29157eaa43b6603af2eb336c152c78c735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145565 Malicious code in nodejs-frontend-sync-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ae7bd01528ae4eb0e9b0708506f1ef7e24e2a6f8bcb754efa14557a29756e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147238 Malicious code in release-it-transform-grus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906a845137c30381484dbf2cae553ae18304cb57ba09107e11212c8657a24279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144442 Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148784 Malicious code in transport-docusaurus-markdown-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71956465a4a6b68fe33a350a15f7ba73656070132aa30b36b370922f7dd325ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148492 Malicious code in telesto-element-ui-sedna-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1558cdbfab08f523afa0967a7618fff89ba0c0666e98e2cdbece56425acc7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143377 Malicious code in html-webpack-plugin-xenon-gacrux-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8797f8c0a1877750170b218f6c97b2f623a50b4c2e852e546a045d85c3cf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...