Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146875 Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140942 Malicious code in commitizen-spectron-webdriver-resolvers-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f395643d9600a61aabe9f53d23f3b667c7024f70af1c64bf477d9fe481b95737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144566 Malicious code in loopback-test-mongodb-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c06e20ea113a93cf3404abcf96e9951035a0ebe9ec1158d959e1b2ff25a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145379 Malicious code in neptune-shelljs-mysql-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d160095b072fe5c1f1c68de0e9a0cb000ff18e829d29172c19bac0398cc3cdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141979 Malicious code in element-ui-prettier-css-loader-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9dda515544b35b86895b297fc0976b11b17da09edfed790be05a518080f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142223 Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145573 Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-odin-server-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42515628ebe4f29f49b338b463fbf9cacf11f0c276fc1094d4db107c4c92279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-ganymede-octans-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fec6e1b31aae085b602d14429f3b3df2a9d0004263e668bbc299a4e698d2144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-ignite-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-orbit-redis-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957cfc765b8daa82d4a320788625032a8cc33b88ebf52723fcb105fbac1146fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...