Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-lint-staged-backend-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa2fd9f0627c17d5d0055e00b56430f9ba1fba381331f5a5942ea674862a810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-phoebe-sadr-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5208ccc41af2c843d0b1d835d47e794441dfe0f3eaaaca4f890d1c07a484324b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145523 Malicious code in node-config-vuetify-less-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d8078725859d1005cfce9ffe26542402304c431c1b404966f75b708ed7d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139480 Malicious code in apex-html-webpack-plugin-configstore-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b8b2c4b1d74cbab0589fdfa152118eaaf2aa7aa84d5514a8cd43e5d42bf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139464 Malicious code in antd-postgres-eleventy-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc23735b38462702c28044f1ca9863adc5a4e093748b364fc45cfe6ff8c2caf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142258 Malicious code in europa-centauri-xml-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7674a66007295cad514c052d1bb8d6b395b7645f95566467054a8c0b142e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144828 Malicious code in meissa-prettier-plugin-markdown-celeste-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487cd6f918d907b2e090c92c6b040fb136aa96869c210a9ed51a5530e1c979b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141584 Malicious code in dependencies-sequelize-titan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09049d1fe55b090643d923e84f8ce0326ae4a3c84a661975aa03b0a5573a0cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-nodemon-lint-staged-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a64793cfc067ff071d4900d58002ac684aa22b19764c3fd61c0daa0cf3e4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145701 Malicious code in nuxtjs-command-magellan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4d7ba3755aad930a37ae3b9210f3a74d13fa9b0ac6bb8f56825c3aba222abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143597 Malicious code in ini-playwright-kaus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10504768cad4ee5f79ca1749353e747f46b0967598af7e3d7504dc839a8f3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142392 Malicious code in express-titan-andromeda-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db56ca2e1f597d46076e860c53c02a5d847424aeba44464086eb792744037e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140643 Malicious code in chalk-ignite-polaris-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe54ef9c61fe29b0ec4ddb152fb7d650282d6a50b1ec8cfc5a45af0115c4b198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142475 Malicious code in figures-nuxtjs-aldebaran-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20e672be0e7ae2cb3cce6b529f93f301ce63e17a79f21d9caf75844ae38c829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144977 Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3f7240ef57a19ea49cf786e8efb14f2c281c3f4efbe67cc4d3d2fde40fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...