MAL-2025-146893 Malicious code in pyxis-webdriver-manager-colors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7046db12c93f852d9af106f281fac38327ff8b7cf8e3aa505fcd91ccefda5b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143861 Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f28d3b55edf0f2e8a35cc81f0cc5f431232659438bbd5565040e2cc2dfd17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143097 Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147883 Malicious code in sequelize-update-umbra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04b62248932ce1eb3bd7057c3cd0e5b5b2cff794acda4db4a8f091129b1cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141801 Malicious code in draco-xerxes-parcel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575a8ae56cda8728c11a9bb1f81db900ad4861cb7e1ce24d25010623344981c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142416 Malicious code in farout-ini-spectron-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b6b0a4b0fdd2e3265a8bbf727271ebccce0211e139ed87d81e9d6beb63ca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142180 Malicious code in eris-prompts-aurora-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11be7b2ecaf34df0c32fbae745c6c3a05bde5437eccbeb24fc6802ad2c760001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140170 Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149054 Malicious code in ursa-dotenv-safe-nconf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6467b9bf9305267e3f19b3326675b76c09277824481b4e1fca8df8bed48f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144052 Malicious code in jupiter-charon-concurrently-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1a4b72f5e7dfbf46d2ec719a3664799804836dcce96db92b44fa905bfbef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148215 Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144242 Malicious code in lacerta-html-webpack-plugin-socketio-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63dbc92d7357f2dc4da01f1acf0624b6e8e6e4639bca26a33abcb901e3057f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143778 Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a14876cd051d8483ba0a279937b068a369f159a8e691f8a587426e0db9ded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143940 Malicious code in jest-xenon-virgo-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41052832b11c01621451b9c793d8ca4bafa5721676a30c232182ae3cf32657b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140814 Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfccea257902995f50333344f6cadcf7150cfdd31b9f5dc79dc56a4e1d2a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147904 Malicious code in server-publish-meissa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bf8d30989d0163a6a234090b83757dc3739de673a9b7bc37879010705fa098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148565 Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146182 Malicious code in phoebe-spectron-halley-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6609c06d440e2b17c22a87b2aced1df5a798c2dfea152333b4a5a15c25eabc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147150 Malicious code in regulus-loopback-gravity-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2e33d869936b58fdbe291e2439f8c32c80eef4c3f563b534efb78ad4bc3f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...