MAL-2025-149474 Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e464d4d807b9eef9069ca788254eff0f8533e1006b633e282f18e6af6ef0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141250 Malicious code in cross-env-csv-sedna-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17131fc8711034353c5ac3b56eab7429cb6eeb40cf5fd656151de8fabe76580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149644 Malicious code in xenon-fork-levels-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89814b0b9aaa2fe6cd27e600a8b89c88ca97ce6c6130c4af46a9e19ebcde5ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141497 Malicious code in deimos-indus-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01acfd33afe87d4da74593d9804d20947cd8cc0b3d205c8ecaf679bffcca4ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148181 Malicious code in spica-terser-configstore-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18813c3e1ff9705d5e8cc26b5c1dbbcfc10f8bda51eec707edc856eeba57da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142528 Malicious code in flare-hermes-halley-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a824300366c6adf30ce407470de5ed2276e7c9d7c0a119f512c5f3e32a9082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145287 Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142861 Malicious code in geckodriver-chromedriver-gridsome-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8871ef4db86c7b2c8ce589d292485e4ca71ce731a3e3f9928d59a1985727379d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146727 Malicious code in proxima-pipe-jabbah-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f975555787a6ad9d83c0e4048259f7211319a19264a2208be438317e99ba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147794 Malicious code in sedna-socketio-cli-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e03e5aff6dd409bd6e5222f02d13b64c289e2d46e8a2c667863efbc4f671d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145477 Malicious code in nightwatch-parcel-cypress-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4543b97d0328d50b59b438e8deb148f568db56de4b1fb5dedb47f443bf2033a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146436 Malicious code in postgres-inquirer-octans-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cddb6832b76e91d97d935d0d9d8a7f26ee084ca8b89b9e2b9d0a4a080d35ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139414 Malicious code in antares-helios-umbra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6d89c00461af5485eef56e494a79bc293a350ccb3ce5239a81251518ee5821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141584 Malicious code in dependencies-sequelize-titan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09049d1fe55b090643d923e84f8ce0326ae4a3c84a661975aa03b0a5573a0cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142606 Malicious code in fornax-apollo-dependencies-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d63b4026e2998bfa09edf925373b6179b99d47e1d6cbe6439ca7a0b37dad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145029 Malicious code in miranda-dotenv-parse-variables-middleware-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbc13dda52cce500456ae68796660af748d0bb9d8b77d1273e8d13427b21b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147085 Malicious code in readable-mysql-bulma-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9bb86e7220b09538173da39233d63cd3d365b9505e813cf551d22f7c309caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...