MAL-2025-147046 Malicious code in rate-limiter-postcss-vega-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf154516a786f3129c492bc67fa03e6e5b0221b1aa910cac2e21fe03e5128c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149325 Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142202 Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144860 Malicious code in mensa-process-nightwatch-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f0262ed9e2a8e84f68ed2b67789ba79c7a2c3aa63a82cbebcf527775b5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140221 Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143508 Malicious code in ignite-cassini-polaris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ff216c374d413615fb651d407bd4c6cd67c42802a074e4c3d7da1df51cd208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141713 Malicious code in dotenv-parse-variables-convict-fusion-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca6eb8631db89303e16034582660ccd74eeb93a6ba715b0bc50d4579f7ee47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142530 Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147411 Malicious code in reveal-md-grus-middleware-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aeec93a734c0dde2c4d4e430a88ca8320a46fe77ff5af7125db03ad02c7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148925 Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141918 Malicious code in electron-frontend-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de682754ce3065d56369af1fab524ac4f432d751667af0eede0e70a94a05cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146811 Malicious code in publish-sails-yildun-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4131be577a8fccfe05f69672359fd356876315139acb90829a87d84b5ab89f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142338 Malicious code in exec-enceladus-axios-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a062249bd440e99eeca3811d7f3872670382d064a5d70f13ec64a7bb23b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144452 Malicious code in lint-staged-delphinus-typeorm-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156dbe424c31b0b557485d7425baa456b1b7b461c9d9db75319dda86b377161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143312 Malicious code in hermes-css-loader-request-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adebda2e2ae5a06e49e1e41ee6fedb093a0ef37a243ddb9e28e4847013c248e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139229 Malicious code in aether-cygnus-nodejs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143855 Malicious code in jasmine-kaus-antares-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464faa91140b13c98353c85c4b4dae8f4104ea0d9662b11ab8d81f32283a3232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149426 Malicious code in websockets-run-script-websockets-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0a70a318c20af9d9bb70ed07c0a0083fc5f959e1a8d806ab7edef580115498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146684 Malicious code in protractor-europa-elektra-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5bff1274211f71d47aa49ddd63a8fb1fbe41e40c6e328bc1c8572c8cfc4c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143318 Malicious code in hermes-halley-semantic-release-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f4bf20a63aa1206c571e19342f1474a9c38e5a1ce3b738b8fa656461386a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...