Malicious code in meissa-async-meissa-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873b499bb8e3a912398350cdd8e55638214ddd9feea30efe08c7940413b2bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142463 Malicious code in figures-comet-markdownlint-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444d2ce3198df02332d69232f00a086f98bd5de52a8dcbae43404a3614a3a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148355 Malicious code in subscription-europa-babel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ac9f5ef5bcf96887f2c16de07fb146a1ea8f5943c3aa74efeb025cdadd5a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148900 Malicious code in ultra-less-bulma-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbe8e09124fc0caecfd47bbc91cb65955ecf81b13e15dc173f1d939c9e620e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140107 Malicious code in bootstrap-hugo-altair-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac14029dddc28c5b4bbe056a0cbef77f3507b7b61076db87a723febc37e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149015 Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148125 Malicious code in spectron-webdriver-andromeda-test-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d4668b877ab5c31a2102a8e1c46a26228af74dd3f9e1ca155bb5764ba8679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148336 Malicious code in style-loader-node-config-charon-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbaae974f522bc9d450490a550cbf10ae06f437364b076e1db60837253cc504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-commitlint-config-angular-solis-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb3f567bb082a9917a4e38dbb29310a4010b6d8c0b2d6a2016a2ee5698ad2f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-gulp-cross-env-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0116f63d9e00fd8d009e592db933a26fd7559ef2ec9933865bcdcc325f20b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140741 Malicious code in charon-yakutsk-elektra-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d980e0c9ef55991ff073ec09e7d4ea3a2e38daafe740bbb3e0f77b0e64de402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140395 Malicious code in capella-restart-javascript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abfac630030252c02b3568ca487b248fd80c9ac82e7a38273e620b3acc91c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139428 Malicious code in antares-pavo-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145793 Malicious code in odin-cross-env-prettier-plugin-markdown-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d798b3df9722c02b19a63a5496fb67f9983705c530880060587015ae941e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141099 Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...