MAL-2025-142129 Malicious code in equinox-ophiuchus-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a7dc6fe75df179a05686ff8f7706094cb57cb476065d9e205db937812cd93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144099 Malicious code in karma-delphinus-materialize-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faadf9be0238abe5bb881e8455b0643e7869d291ed29187136ce49f3e8fedc7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148800 Malicious code in transport-remark-dorado-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9aad9a67f5062741deb49c1e75c810f75cb65e469d8a271ca157e9b09ce571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141176 Malicious code in cosmiconfig-convict-despina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4641d82903a6b267b849579cbabf0ddeba17d40fa468be2cceeadf773543f2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146029 Malicious code in pegasus-ganymede-native-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143222 Malicious code in heka-webpack-init-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa25d9b845420bb88d426ddf06a8cb9cb64c883ebb02a093672626c7e7b8637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139269 Malicious code in aldebaran-cache-repository-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e821d6c2cbbe5b21bc92702dd5c89263ae6d7671b2afa2aa5e4766fe310d9d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145315 Malicious code in nconf-eslint-plugin-postgres-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16511f2a3d81c6b7123b95d33c713dc529b44f3a18238609313932f87ce5a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ad1ea4ab735668fc4f7b7322268051d65b809c038a20b3d40b48899eb70eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139153 Malicious code in rough_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19108e27330f7983ea1c58606bfe8b88286db86f41acf90b79117985b4756a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-amaranth-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba61537ed8c5d8d3fe781e8c3ba1e4f33461ce56bce9f259eec377f198d7029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-blue-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d56a9e900821935bb57bfa50c0ca6713116a50b73584cff9cafa57da40036ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-amber-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e30befce3cb5ace85b22d15ae5039ff8679def961ca8e9634b0948bd7a1bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139109 Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138746 Malicious code in furious-coffee-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f34ba239c827981f1b70d30d1dc39eda68b32d6e379a238557ae9cea6fc1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...