MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140005 Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141510 Malicious code in delphinus-andromeda-jasmine-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ddb6526ddb58ea3ca57c2cc5afd76d135b8bc9b76babdfa5237dfd09ed5308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144286 Malicious code in leda-prettier-antd-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43466b1e90ff3b3aed8cbdc1dde1a86542af225d18ee73ea34de99f4f4ec5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147657 Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140605 Malicious code in chai-sedna-configstore-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db186b19b6b9034186b75352f2f8ba47791d89f3232c2472ed5c907aab10f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146699 Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148811 Malicious code in triton-convict-yakutsk-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99bee151fa91ba2c17b175ce75ed36f645a5184e29cc11dfd1aa77a8199ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145437 Malicious code in nightmare-flare-karma-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ecd3f80227f98c1d0462c968014d6de029b6da6be6262f1068d0597315dce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-convict-auriga-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925d7e6e7e62817f4fb1ca00bd1ee6a896852f2ae0608331368353a0c0dc6db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cache-toml-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef962dc2ddda4a777d28e0c834a6966b710012d753d59593ea58cb19c23adde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-zenith-configstore-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1190e910c0d9525842cb1b622a23dcdb6d56ed8baf21821891533ea0f4e2290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-altair-postcss-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6eb975ebd85eb737822873578f470bea690b69e9e20e9b55920f7137763132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-eclipse-await-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f426ac07a625c3570fc4090814ed7b621a2e38f39385e657350218d08d039bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...