MAL-2025-142313 Malicious code in event-geckodriver-orbit-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea1f351f7731a4ee06d3840c0ff604f3d794d4d09ffdf637f2cb2dfc43f420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149782 Malicious code in yaml-aquarius-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cdd5782a7ccd2ad4094b243a61df1ee126983b9a2415a077d58e1353944f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139675 Malicious code in auriga-dotenv-draco-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9b2da508ce5e3cd0f2e4e939e92d8107d8b398972b460a825cdeabd47542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145538 Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146526 Malicious code in prettier-xanthus-mira-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a4a84f5c6957d09542a7fbcfa103162352aa4cb119d5508f2321327c232bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139909 Malicious code in barnard-izar-castor-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0a7c2000bdd07f91cd07e1229e7af2f56859178e4a5c36f9e5c9f818c0b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140317 Malicious code in callback-shelljs-antares-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0876a1e9a989b814de994507e31ad710b808c14b7261df61127483c6978c547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139245 Malicious code in aether-vulcan-nightwatch-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81184e70ff47e3120c3a33be222f6fd072ba6b272cbaa3a37f782fa9b7107289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143360 Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-perseus-betelgeuse-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fa8f8962f849977da38989af1f68903aba39062e31527b08d77f2cbadcec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-dynamo-axios-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a2d57cd4219b83d4e49de185811d6795afc72bc5081f1335499a70cb9b3c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-loop-ignite-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633fcf5eb2e7b3b4eef90de751ff521b733441e804de9f3e4c7c0d54f812d99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...