Malicious code in protractor-eslint-plugin-nestjs-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f8cd32f1110ccbffa6ecc79072349b56e4f362a8e6373a58b6f845469a69df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-acamar-meissa-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34115d60095ed307bbfb5ca6849626271d41dab18e18f94733d37021f9ca2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-markdownlint-axios-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9903be51bdc67214154b8fe67be06bc114704c50dbf5c12247ac33984cbf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139966 Malicious code in betelgeuse-apex-async-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b03ca299b92c0eea799ba3395d5f76c7333de5e854b7bb98b943deab8be90e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142457 Malicious code in fetch-socketio-cosmiconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b66b5bd3a3884e56eb328697e599b1fe4d7b8ef780cba66f461c63cb2cac129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144731 Malicious code in markdownlint-start-materialize-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b86e7289af41e3713ee478fd25844f6004df8c4ad8c5ecdc276dcd607a7588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147066 Malicious code in react-bootstrap-magellan-xanthus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae5bc0172f654995249a5a80e3bb2e62bf625d2f7599bfb7ff3166df47fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145158 Malicious code in mongoose-koa-jekyll-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e938303663a27d9f806911acfb796bc1db37b7e755a0b5ea10cb0f1a0132e6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147044 Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142519 Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149305 Malicious code in wasat-warp-apollo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd93a066455a605174fc758b22b8487262f6e9ca5639cd5ee67485076eb00d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145272 Malicious code in nashira-enceladus-xo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a00c803a5684258824331828ddf854b2950e9f8e53479ef4d866e3366f0616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146975 Malicious code in query-nightmare-cz-conventional-changelog-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cc8ecc2df26572d2d756d4488d3a7ef0335615944d3c536fd7e736160acee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149564 Malicious code in wolf-slides-nightwatch-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6fa277ac69bd9089da09771fd17d8924184412af68db60a37dd1a2614aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142845 Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...