MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141452 Malicious code in dactyl-rate-limiter-janus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcdc160229f75ffd32cdde8f930e032a5f93e05005ed6ff121763b51a827da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140264 Malicious code in cache-build-commitlint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdd3e069afa219b7f200c4de2044062b61cd5636880c70289141ffc156b82ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140855 Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5537dac183ddea56fe80ce29f10e2395b13fd7e9a0c8af926ed0e4c2a5b4a9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141831 Malicious code in dynamo-nodemon-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143286 Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145715 Malicious code in nuxtjs-resolvers-procyon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef8b8f0982ee3179b95dcfe0d783b162a034338b46c0de996a09c6f4b3a577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-stream-yildun-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-titan-arcturus-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a657241886fce2aeee3b69ea394d2e4b5aa9e42a1a71eb71d997f5972215fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cygnus-supervisor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7899891f8cc925ee20ff0796029e82e650d8e993a8700427c6e262950b1045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...