MAL-2025-190262 Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c9d5100cbbf9025a117af054f96d788aaf9bad8a5366d887bffe7b37c69c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185500 Malicious code in apollo-dotenv-parse-variables-stratigraphy-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b6bff1ebc61f26c983aa31d04f318f822c5eb75b154187650b15d6904971d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186964 Malicious code in figures-duplex-magnetar-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eae1d7027882b6a70265a27433bb8857139add8539583e992546d667debca8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188120 Malicious code in moon-old-gamma-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185747 Malicious code in barnard-kronos-rate-limiter-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11769664e39034a14dc89a223dfcc785d7f01df045143a545feffaf30d8dc5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187161 Malicious code in geodynamo-callback-less-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c4458ad3238e5de7a67c222d870ebe2709d938149bc1b8763330abcf4a23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189395 Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189121 Malicious code in refactor-psi-xml-cold-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49df62b681f38d14d73246fbf7abeff09d01a5362d99320220c285c35bd561e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186266 Malicious code in concurrently-fork-blazar-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2cfa382a69284deda13d32454b9f9e9e1ed3c213c197f1ee60c093e7277f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187598 Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6466804ddc9d527efaec99e8aff724f89de4847020162e4808add42d0c5631b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188945 Malicious code in publish-alphard-convict-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c2a363ef96b131f8808426949e15ed28221d6374dc4b5c021fcd973e62636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188154 Malicious code in mutation-exec-arcturus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190230 Malicious code in wasat-carina-shelljs-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf887cf461bac29409b28462e5aa5dfcbab3350726346a37bbafb6be0c1e1430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189527 Malicious code in slides-callisto-algol-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b3bfe695362ca840a8b1d470ae420b7edfcf507830c21db35bdac8e60ba2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190291 Malicious code in webpack-quantum-babel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186349 Malicious code in cosmochemistry-transport-primatology-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff2101008f7863c4b4d8402054e9a5931b5691f5e73308b644efa39be7f2925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187851 Malicious code in loglevel-meteor-mui-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca35c471536de6395cd1a455a18886f5a26d7919adfe6f44006c4879d894dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187808 Malicious code in lint-loop-playwright-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a242525b6943fcf77698c5a6cc5a7f8ac4ce45fb053ebad712afff73b5e0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186787 Malicious code in epsilon-bash-sigma-tree-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d28814c9273e5485edabd3f7886de05ba4b3bb5991d48da9ab724dcf3baaeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189494 Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...