MAL-2025-142734 Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147337 Malicious code in rest-adonis-framework-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc97d6ec3057d62c70412d4694f39667435d58eb89479f96832d7ed4b1b46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145581 Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139408 Malicious code in antares-equinox-semantic-ui-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd5fed7ff9a700123815739d80aeb235f0417ed6c7a5251ab4cc8c7688a8c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148905 Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146502 Malicious code in prettier-rollup-plugin-astro-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfded479fe2ba4f61803733a27544ca78184e1d770ddb07750a38a7985c66b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145808 Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147115 Malicious code in redis-sqlite-odin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508b6ee75945f1d3e5c0620456e69c2562fc5be6e27f8f8e508184d955043ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142738 Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144965 Malicious code in middleware-uninstall-dotenv-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c719f45873e976f68fa0b1aca736a2f137187f56d884006306fe80b62893db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-hapi-airbnb-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65055bd97dcce6cc8bccd65bf096b6499772061ed4af24b831f79df372a16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-reveal-md-neptune-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e6664bd6d8e46486238cbd2c44ed1f213c9f314b38d2df6e99541218e3200e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-deneb-global-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc45d25dff6428f6f80adce429bef51b48997924c82d3651d87cfbcf804143a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...