Malicious code in fornax-mysql-bellatrix-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-virgo-izar-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4cf8e13bc345ccf34f66d35bc121a7daffb3dbb0cd0836fb77d60461836eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-rollup-plugin-hexo-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-astro-forever-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c858389f05b16e2689bf68d37a15e90ea748e2604af180f27de3c2e5205aad5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-protractor-ganymede-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c41ec4319564cc6f4868cd3a61a96ef6d5f509fc02c831eab0dda940c5e1e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147486 Malicious code in rocket-xanadu-nightwatch-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf13fd5923f2e7943cebd120d4e893f615243a7c95ccd364cc8967b8014252d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140180 Malicious code in buffer-xenon-meissa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9313b74b72033a3c8808f05235d43db0602376af815210e74dd8bf694f05bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147236 Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143549 Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147989 Malicious code in slides-loopback-remark-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e43754ce3218fa51102acb6493bd334554e196c1386c6d59eef679f5f45b7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141995 Malicious code in eleventy-dotenv-node-config-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6740ac3327d834814b3e75c025ede5e5a14ee98df856a144afd7e6997fcbcbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145639 Malicious code in norma-cz-conventional-changelog-changelog-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72c73c24102a1ea8e836ef5ee6740a543a940fefc68ab2f2ec513b98fe55f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...