Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfccea257902995f50333344f6cadcf7150cfdd31b9f5dc79dc56a4e1d2a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144150 Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be0d8cef8cb791f6a09503be56fe69966c6977962c7e63fbb1283afe25dc0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141267 Malicious code in cross-env-request-markdown-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac399a914c58ef29195046b374c25f58ed3f7b5a0f5be57f42cc767e194bd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141271 Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145619 Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c410beb76d57deeff1423e4a69bd221b151286e7e4b5237718fee546aad5035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-enceladus-reveal-md-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d8a3120c190a34c49156fd1e686e81f0eb1c3ae6171c5f6d558e8b32034c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-husky-cosmos-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebb451c9b23e274e850692c02cbc655f875c2f814390198c1adbc3705315c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-sirius-mensa-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39685b13c2f35a5acf6ddf1c578e4b18e9c1fd50231940372aed718a32f486ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-remark-achernar-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddfcf72846e3067c595237cd37d51c7e34b6ba2449aea6d0f09e94d187593fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-karma-sqlite-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16c0ccc134f3847d2a92330a4457c4e5179f87c348f5481d1e1a54bc674c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-javascript-achernar-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99885415d1f36f77e1881d4d381b6f8d4fb2e2a0edd684a8de5cb5464fc9ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-resolvers-procyon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef8b8f0982ee3179b95dcfe0d783b162a034338b46c0de996a09c6f4b3a577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8918b440c334ac959b4a14cb31973b6672f8c32b5b293ca8a93e02c1f0d77725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-tailwindcss-sadr-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa42d6992763665ae1b08152de072d9e124be886828924073dc84314370e78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146428 Malicious code in postgres-bulma-solis-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2939f5fef03e663ea47af7c668b5c09c22b4c5e2fe26f2ca08c97814bc5ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147889 Malicious code in server-apollo-markdown-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43877fef46565713ec332e3eaea0f240ce8a94564f81b080ce2c75687fdced15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...