Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-koa-nuxtjs-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396ca676919a7d8b282472201332846db947ed7a0adcef9d8f0659a08b91ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-eslint-plugin-nestjs-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f8cd32f1110ccbffa6ecc79072349b56e4f362a8e6373a58b6f845469a69df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-acamar-meissa-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34115d60095ed307bbfb5ca6849626271d41dab18e18f94733d37021f9ca2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-markdownlint-axios-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9903be51bdc67214154b8fe67be06bc114704c50dbf5c12247ac33984cbf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141032 Malicious code in config-meissa-norma-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145112 Malicious code in module-ora-polaris-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fb3d2b6cc8472f5b6a43dd86e1ce3f8fd4d3aaba4f83deca9ca99ee64f6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148611 Malicious code in tethys-betelgeuse-lynx-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109285f2f1e983b64fac27c958699ebc79fc2ad92a4eb353e7f25c5110e0df5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142519 Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141746 Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139335 Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...