MAL-2025-141117 Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147949 Malicious code in sirius-eridanus-slidev-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7427c3c55cf749fe9f18beb12af7f752ff375d04209fdd944459a4648ab7a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146345 Malicious code in polaris-grunt-nightwatch-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139947 Malicious code in bellatrix-oberon-halley-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af62a0e9726a0d93c7beb487a2175fd6dd836c21b6b0fb9b04a2bc42bd7fe599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148730 Malicious code in tool-cache-jasmine-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55861bd6fb59a0f1b7a41137e8a271d285b1ca827b491a6983fa3c6a4aa49fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142120 Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-dependencies-fomalhaut-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae827852ca50c8b8261e018186531b500df684686ce65d1fcc9aac58119916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-xenon-repository-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620581b45cb7abdf6bd1af267c802b423227a4cff2deb036c36590b0e2e89947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-vuetify-enif-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0995bf6278c3b0cc799d6ef007365cf569b167a6083a421c0225b1dd6d0f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-global-indus-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79361108aed6e40411d643c21feabdfd09d5e67872f95b55d72cc8c3d6c230da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-terser-webpack-plugin-sails-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab66765aafe6a3989f3cb70ae24310d06329d976f3d1cd58ff9e5d22b8c2401a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-envconfig-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5293cbc3ab68ee5e40f6a3c2e9503a885bff68d163cf7e30570724b385c5336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-vuepress-corvus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14f3fb30811f382eb1461ef9900bbc9345ddd47477d39478075edb9e7c316e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-dorado-firebase-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7276ae4398ea01b17180f7849c7f228687aba2521a6ed7f054c58b4e9383d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-browserify-transport-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37498829f631e70f8c332116a314debe135d287d9f5da1c3bb49572d356c2931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...