Malicious code in postgres-webdriver-manager-cosmos-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e26d6cfb77fb8edf664ca217477556081062b57dfa0e5dd2b0efb56a64a9daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145959 Malicious code in parcel-gravity-lynx-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0aed86a0b9aca73d4fc0368b4d3dbb20665ce2b49f73ce2a0cdcd4f93f8a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146217 Malicious code in pino-electron-mongodb-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eeba0ebccc1bac78a05f546c3926f1383b3bace28db82699d85263a158b7ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148607 Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140668 Malicious code in changelog-epimetheus-playwright-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ec24c5fa750bf9b76460f81fe16dc5ed8f7a8005aae5f8a1a60e5520705c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142835 Malicious code in gatsby-cache-koa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee85d090a494631e38e58d53f600e25c6242172d0d8775e6d97ff00f7d14b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143607 Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146569 Malicious code in process-selenium-quasar-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c223c3e8c566dce16e6ff836337eead79651732149440d97da8f0b3531aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149541 Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144213 Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145095 Malicious code in mocha-typeorm-regulus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb72c95947fa7d58b028dd38afff0fb452892ec02153990107a8ef8ebcb201d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145274 Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141199 Malicious code in cosmos-antares-avior-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617d6e5eff2b19a1a89297c4b75094e3aa4bde467ac80950ff66e9485eabcae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145335 Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140742 Malicious code in charon-yildun-io-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69188dbff2a3d9d5fda5e3ec66c33f9b5431c4a8271d1fb7ccb64cbe4bd7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144312 Malicious code in less-json-sync-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7bdf49f9f526990d16fa5fe2b84526a9d322ab85095c3fe1b1c70438820902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144152 Malicious code in kaus-nightwatch-uninstall-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286ab42f83d6741c033cb2b99f8f20878c9cb39ed9d7b2fad08c6a6ffbf55388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139849 Malicious code in babel-cluster-zenith-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f977b338090844b6481ac64a9e37f943917cc5613c463d25d52acc8f6557183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...