MAL-2025-144448 Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141957 Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-chariklo-webpack-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f539904b019a9a6927140559d0a40efa04b8065a579e3438207e57294f5c867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-chakra-ui-upgrade-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c97d1732e08f808b9dd9c74b462e75c996c7be35f851bb79e18d0eb37147d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-development-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b97c61b120b0d11484dbe757f30da970c4faf2ded6606a69162f1d6f7b2213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147908 Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141823 Malicious code in dynamo-axios-vuetify-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07f3ccc278e62a86432c414a4fe672c642dea1baed087c337de30b545748280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...