MAL-2025-142887 Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142641 Malicious code in fornax-neptune-telesto-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fd2f930b41dcba2fb86f7520b301510a5345895d0d37918b00f721db9fd953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149422 Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147414 Malicious code in reveal-md-koa-venus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ab8f90e8901da10b0e96c0a7884fb5d5c27e5bb8292bf8a333c83e5161a0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142429 Malicious code in farout-yonder-convict-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5ec00308a06b9e932a7c73d0618dd1b9b6e1848c2e94c2472b36c9395c0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147607 Malicious code in sagitta-oberon-json-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cb20254e1fba013cee3ebbdc026315453ab57faff4d5dd7e2f54f5ae271983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144396 Malicious code in link-algol-nuxtjs-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b859eb9933bb6f0230d1839ca2c981f687fb0cf285bef87f4eca1f31d5883ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-event-tethys-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5b9b599c3c8e7f60e29a80bca644e5db5e6622c17b4e3d563d11d339416dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147987 Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141172 Malicious code in cosmiconfig-avior-got-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fc7608b3f64152fd30fbfb841a094ffea14421fddfcb55ff46bf7d5f7aea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140955 Malicious code in commitlint-chai-wasat-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191f9c9f5e91d2aa004aaaabbed9769d5b2df47ab656bff9dc8d2e43c23b5338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146561 Malicious code in process-nightmare-corvus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459dcf63d07e643ce12479580318ca479b9443183b139b99a36fcc6544ce78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-node-config-soap-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab280bff732998bb8bfe8b8157bc57c923098a5f4503da372fb8508a4b66a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-registry-bootes-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96ab8b439374483af0e747643273de16e3edd479811c0743f9b3bba63150c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-xml-yaml-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0671b2be9d6650ff8c43e98f38d0c53b0646276240a6657802b68ebbc5153381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...