MAL-2025-144350 Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139753 Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146986 Malicious code in query-winston-taurus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda3d47eb443e153b268e3cd84bec534376aa447abc556d9b1fc2afb49c208e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148767 Malicious code in transform-lyra-run-script-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbfac3d27d5e5585da3acb64aa34cfa3abf68b3bb6b10150c197fca788b64a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141453 Malicious code in dactyl-remark-titan-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66bc1ea42bc98642c4ab4324c7848b4233721a1d6d28ec5e7e7d4559a5095a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139430 Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145005 Malicious code in mira-convict-element-ui-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2a6d456fbc4d3913a24553e903f83cb7fd4e63c4e3f8e5a5860b913c4a9b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146950 Malicious code in quasar-geckodriver-got-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f1df05da16c6960d3d2977c6fcabd9d256fd3297e8205bfca97b625c6a24f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146673 Malicious code in prompts-playwright-cli-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc084e5b9222f52f4b8ef10f90709e8034d66f2718f5ee1aeadd37c81675ce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147860 Malicious code in semantic-ui-weywot-helmet-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0a53bbb200e288e011a66c230ceed83ac3c385d940f20237fa3f3469a85a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139281 Malicious code in aldebaran-heka-prompts-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a9d30a248a0ce5bc126e8ea78788d311583bf80be7d9efdd06c8fb196c500d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140280 Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142705 Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144292 Malicious code in leda-scorpius-fusion-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c2368d5e556c53b4ae55edbda2692a0cbd772956bc8ffd3bdd54d97d120dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142181 Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...