Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145057 Malicious code in miranda-sagitta-package-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94593febd7aadb0e0468641864d190fbd3d0a0ae43e07650fc889f6a630caff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141268 Malicious code in cross-env-restart-ophiuchus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02107644150263cb3d55bedb6b19c1c298c98e216e840814b6a277bdf849f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141018 Malicious code in concurrently-ursa-betelgeuse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cec0f8ffbbb35058704f59236fc00d2feab74e455c018f7971f2d20d13b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149729 Malicious code in xml-ganymede-apex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d788757c75f0a67b9a6b6bc0cd600a9ceafda0091cddd81a49848e205f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146552 Malicious code in process-hapi-luna-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf15fffc83e236734502d0f4a17fc39d868f4cc7097701f1d86e3eb8baac713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149759 Malicious code in xo-wolf-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fda59b09340bddf64be7b10b456fbeef410d7c32413ad9d563d889dff6205b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142054 Malicious code in enif-middleware-bellatrix-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127fd7d76d0f3c78514f671964e2d7fb10b763951b5f7d131a4c1811348a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144987 Malicious code in mini-css-extract-plugin-pino-changelog-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc3b096ea1cce54a22723ec725ac1abb7d37238f0f9e96fb9d1bb568c06d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-leda-framework-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-mui-fomalhaut-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f736890bb161d7829091a44884c79fc095594c2c5cf79d556a77560a690d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...