MAL-2025-140047 Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-phoenix-hyperion-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952476952f00c78ac38eacfdc6ad9794c14e54caac5c4693071065f2db63bc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-polaris-umbriel-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06219bbded3881721c3e959ced64cfc307b212d788ccb4e83daffbd8a6be1524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-install-octans-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9accc5f5e19d47c4312625e1ff6983f2f0adf820dc39d16c93cb33a2382f13ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-parcel-wasat-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a7312843f5c6993959b1b1e02cd38fe30281e4bae43d85f034a6b46a350ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-yildun-html-webpack-plugin-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f516760bc57a8ec8d22c128a4277234f4b318ecd20f0497088a49ac229b1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-algol-jwt-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfd639c290016964d28a4e4d3975f56f9bde2c430129df5be23d9169a6700be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146140 Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1fa8b436f5e07f403d4b7217a2c4f24e502c13dab5fe7573420b4b4bd8528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146606 Malicious code in procyon-mongoose-meteor-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6f06f34d61e17c30e370b3cd08343aed4d0f6b607db2ca3213a5a7459d1512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145745 Malicious code in oberon-firebase-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b771677147a576d042064574bcfeab962f3a687f90f3b3887e89b1b32d193d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140384 Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142869 Malicious code in geckodriver-jabbah-middleware-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6d36ee6c729052ef5490e2ccbb9ea74a486340678f9672debe78bee3bee48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139943 Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146054 Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141719 Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...