MAL-2025-140767 Malicious code in chromedriver-dione-server-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976eaa90b831e7ef63ca530ab6f33c384b31fd9790980dc34cbec5848ef7813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144696 Malicious code in markdown-pdf-mongoose-hapi-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb45e9bae1c86f4034644fea07fcdc86ce058c7fd78f7f663ac6c3012e4171da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145506 Malicious code in node-config-envconfig-eleventy-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7fcd4d199c4e31a475d77993c12ef51ad0d4f90da9d3faeb732173361570c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145211 Malicious code in mui-spectron-webdriver-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b388329fa9ac1bde5371570b5087a75c2e9dfc2b68395330a04b891d67cdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140718 Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146985 Malicious code in query-wezen-ophiuchus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963978e738e91b8096361f2d0993dbf63b1c2007be9bf4deedfdc91631600f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149812 Malicious code in yildun-dynamo-halley-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b626362eeed55bae9bb863aa98c40db9cfbabd1af02b8ffe4a9ffd65fed432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-andromeda-less-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756e1e5dec54aa1aff257fdcd777d65f86e0a6df55149226949ec83b609f32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145010 Malicious code in mira-inquirer-lyra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4535af8d9a3c92a06b452d941a13df4a198e47bc1d6483cf895bc8971bdd575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143929 Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149067 Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144799 Malicious code in meissa-chakra-ui-mensa-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c41dcb2039948b5b1d3b95f09151efa9edd50c427aa1fcc052a6de060068f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...