Malicious code in cors-google-mocha-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d114af8d971cfd46a6d164d73ff566fcc20fb9de50a635c47f8b650efeadcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186014 Malicious code in cassini-markdown-pdf-fork-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189403 Malicious code in sed-secure-rain-water-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd93355c379fb04cebb47c7a76029b9ecbc852e8bbaae7413f21844b2222cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187336 Malicious code in hercules-fermion-hyperion-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732d75f6cb499379b6843ff19e5384bb058ca83c8c3c88845de8f273a8505aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-nu-new-nu-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f181626cd1e58ae54d5a7e6958edad8e897a4a8cef1412d594b4d7f983ba163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187086 Malicious code in galaxy-bellatrix-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf6a73bedd37afa153addd17291ff79786e5d5009b4cb9990c9544a21544ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189185 Malicious code in report-water-view-cluster-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d47942fe1d8723769bab30f3ba8f16a7ae89128a610ca5f2b3506215e6bdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186357 Malicious code in cosmos-centaurus-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2321296a3df70cdf5478b1ec5b12dafad4ea5aceaf7cf64ae37ae46f0cb04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-passport-eslint-config-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3afed2efbe84aed1b966215535f2da5ba01a01ffc79f5b28b8e3b28fd6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-winston-deneb-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b680b994c88a74132e41b6149654104412796e59caf936a14b48d70c5e97e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-user-awk-bundle-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13af1c15269c3456ca5cec6d14a4862505a34f1cf9fcfb6c89f3e739db65abe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188672 Malicious code in phoebe-holography-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f786ef6f1326d79ed74a82e68991e790daceb5da183862a7f8406b1c60880be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-bionics-schema-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de16c695f4b26dcedf1f8fe7b76d18b9c5022baaddaf23ddd0024dd05f8917ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-virtualize-private-link-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4adc0e9d1ff505b8a506865352273ba4c53552e07dfa1f7c2194dc608ad2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186713 Malicious code in element-ui-fermiparadox-carpo-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6743a0059c55715c9eb684a714dfa0ccb855380d2eaaf67d88ce2f24837134be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189017 Malicious code in quark-dorado-ethology-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9270626698c8706953e8ddc2fe61d99577497576cc954a81c95ae6ad4a0c625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...