MAL-2025-149333 Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143153 Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140926 Malicious code in commitizen-chromedriver-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c39fe3bba442aca2cda6e7c18a2ffa40c87639f81952046f80fbff313e601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149832 Malicious code in yonder-child-process-writable-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71630d74ef3a2db09852db5443aac9a0a99d34b52adf3fe42b07043fe9a736b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146648 Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146009 Malicious code in pavo-stop-aether-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc07d6adfa8c2639fddeb3a5293bf6a4cc3c3acf30f84c04dacd7f8b46a939d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145607 Malicious code in non-blocking-dorado-reveal-md-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02083361929600142cbbd362da8df6c63f05a2d0cf83912d9c9c02aae394daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143866 Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140932 Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144233 Malicious code in lacerta-backend-soap-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce45b105ded3fdee03065058388a88b616fc7fc15a7c590d40f9b00cc2169f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140286 Malicious code in cache-telesto-antares-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2e5258e5816f646e8aa2e161245fc708ecb2160fbaea032bdea23317897e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149896 Malicious code in zephyr-sqlite-pulsar-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d14913edd6b7adb3e586d29443344e3a2618df7c5b9aac366ee0a84441bd20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145539 Malicious code in node-sass-foundation-helios-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa148084f3aa7bdcf939f75d7ed0963f845ceea2b4be00e210a62320dee30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148657 Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149016 Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145254 Malicious code in mysql-meissa-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0eb4b60620a7189a9a4bc23c417244da08f5afdfb4839b12a5e386e93d14ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140918 Malicious code in command-parcel-stop-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252c38b91e5f81c51886894097ce6541eb32f93c1828c1c30877c7209a8a83b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143721 Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...