MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139251 Malicious code in airbnb-chariklo-elara-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cac66982265c4f2d61202648e76580f5db3c11392d6a416f61414a7233a5bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149564 Malicious code in wolf-slides-nightwatch-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6fa277ac69bd9089da09771fd17d8924184412af68db60a37dd1a2614aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149605 Malicious code in xanadu-package-cygnus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa2d250e72977c2e74b7ab03029d46a6ede791ea7df99c5cb30ab2ffc417dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-release-it-antares-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560e4dc28499f01e23a21ff3a7f9f9933e46e15c9ed192660af888fe635613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-node-sass-mira-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c0088d5c750f8fab1a2dc599d682e4ffebe0cebbc23360f042a0267bb5031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-aldebaran-hexo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4819b15080774e0af4a0c079224ff1d422220c1817dfaa44d07aab13d0568164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-release-it-altair-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6978aaa136c6001fac1b87f9ef2f0eb076861ebec1150f4c4c776a2255576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-nextjs-zephyr-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8344c28a41b99d856235ce4061e3fe1cef579c6bc379248ce3e9a5a886efe76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-wasat-astro-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08c20be557c34929f5df6c7e5cfcceb8b208ffe3d9dfaaf04557cee7aae0a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c013602c546a941cd797235368c91bf64594bd013390e347270c00560b5077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-pino-ganymede-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4dd6328527d6a79485918cd6d69b55a14c19020d45678be01530f3fd8b220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-hercules-css-loader-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8f8e6d03c3daf00589833a3797e608a89883125a45d9cff367282e9f6585f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...