MAL-2025-149874 Malicious code in zenobia-sedna-pino-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cecebe1d7af349a9854bf535f00bd7bbee219677acdff8be924b2303ecd00e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148551 Malicious code in terser-webpack-plugin-fork-dynamo-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059022a5e2baae5c20ba4abb7e96dc0f745db65935cd63e383ee4ce4e3e868a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143419 Malicious code in husky-global-lint-staged-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142893 Malicious code in gemini-callisto-regulus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9c15b620dc27ae7d09f0800168a33bee4e27d7024b3a940b2849bc637dc10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142091 Malicious code in epimetheus-betelgeuse-toml-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2853f1e0cb19851812839610ae7bf708341ec62a217a1006c8db7e958a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148864 Malicious code in typeorm-xenos-hermes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd8e8455465ccb136581cc210a5f1565770cf672f43b994f6e8b31c06e57a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143232 Malicious code in helios-google-venus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3ca350cc2d89867e35e9712945365651243ee77bbb151092965b2539e17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147233 Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-eleventy-venus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2496a63bee7beb3167c28e31284ebf45ceda5dc2fe54d573431cd05f1daf2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3f7240ef57a19ea49cf786e8efb14f2c281c3f4efbe67cc4d3d2fde40fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-arcturus-capella-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a234270a69e264a43939406df15afdf5f18be1d2553e69856deddc166eedb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-morgan-javascript-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667105714c7d9e1c524299dfa33797fcde0a423352f5c86fc8b866f4bcc72edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-jasmine-ini-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246a6e5b17ab1e16638d1a3543233fae486f2cc03d2ad87def66745911ca17c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-hermes-halley-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4edb498873a1a185d21e0f0373397cc9d6b5e04505b9f46ce340a338aff3ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-jekyll-colors-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c22eb71e06d2d2d48f11a20ea3533f6f273ada9722000b8cc19d5bcb26b172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...