Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-spawn-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5914a8918e714bcae3b3d0f8a6644a67779481c56dbbda3503aec0aab867c916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-request-postcss-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fca1fc606cf6304fd682277d3fe822752201f5db947bc62472a4202d2ddc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-elektra-query-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500f63431257f1c06eeb57bdf809169a3a833961b9df76c544c642bbf00efdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd914900fc67827f00e07c2f5c5fcde3d709bb90a7146f51700c73d01e22125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-indus-mui-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd578513e97bde5b2a543f6ce4f89225328ced75c1a8c735aff035ba75464f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-jupiter-markdown-pdf-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edb7d85694a3c456255640009a7fe882ffd52efbc00bf4ee4c78c1d16712c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-commitizen-foundation-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085563b1c755c9034436d3a7fc944ed51789e52fd283060c8aa5fcade7727148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-element-ui-mongodb-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf347523d3c56df3c45f76aeaca15bcd61fb5768dba5c2a63dba018af6657e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-xanadu-mocha-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1df3b3e4895388627bda6da43b31bb935844f403150c97691e61c85dbdcb65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-leda-framework-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-yakutsk-relay-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c90af33d81fd2bd68c1e36ccc3c13600a08f9957b7fdd7c2c3a2bdda5e4a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141584 Malicious code in dependencies-sequelize-titan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09049d1fe55b090643d923e84f8ce0326ae4a3c84a661975aa03b0a5573a0cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147211 Malicious code in relay-virgo-native-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bbf0b82d1adc23a5064292078fd7c51cefe3f55c09e41f8da9d5714ed67dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...