MAL-2025-148602 Malicious code in testcafe-rollup-plugin-corvus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fddcde5015e0fe42d0e3748a46c260942439e93f59eb180f802176af209eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149378 Malicious code in webdriverio-nightwatch-sequelize-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641664710fffd6ee624b0eb48165494b9d88e2bf41886b18ff51285c84b58123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144422 Malicious code in link-sails-promise-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139141 Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-silver-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522a8b5b9ad0e1e4926c447833fac5958ed81476318ccd064918aabdd03d0795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-maroon-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25b1d74b0fe2abbb639904a901d5664905bbf7a4f235ae76bf26e9e90272641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138761 Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138665 Malicious code in dramatic-amber-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde371e43a8f2ccbd1a4118ee43bd258b0dbf755eb6afca4aaf022ec2d5deffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138840 Malicious code in live-emerald-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cb2a4fe3d628a62a93d72bdcb2d5e969c458ad330d00905c65783a5a5e14d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139126 Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138679 Malicious code in eerie-cyan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6acb4888c9f675f5b4c5b83fba44f370e8deccf1e1ae5f15ce0db00e99a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138799 Malicious code in incredible-cyan-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe01ec4fc7dd208e4229b84eb5590bc6e46631dc9d794f2d09949987fa726f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...