MAL-2025-190257 Malicious code in webdriver-manager-aether-less-loader-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de863c7a2c1c81714e79248ef95df12525d1f8c785fc02a28136e4346309dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-supercluster-release-it-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7a022452e3dc430840391ae69399409360dc46577b5416d489a22c8a8fdbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-luna-luna-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1efe8a02e5a0cf5767bf942f74baa1ba82ff3d393560c1d4740ba7a5bc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boolean-fork-uglify-dog-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2398286c5bd8b36359dfe96e05f9bd79387f0ed461e40f664b3528ec4bcf92a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-mesosphere-slides-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a91873a5b873df3fe99ee0ec6b44cc1d4008c8bc74886676ad22b1e99b5abe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-enif-sirius-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d6e28e0423c02db3969a8742d5aa784afb117a4d8361b30eaf8032885dbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-aether-hawkingradiation-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0a7a9c4b6adbb29d416747efaefe914079d8722fce2307a0b32e37ccc5eb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uranology-less-markdown-pdf-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7bd429984bdfad6fb783aa98cdd8ab753a86703687e1e723fc3a2e3aee022d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-publish-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a79a38e0a196ea73bb64460ddb5a414d0daca9ff3b5f70eb45ce4fc3959871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-spectron-parcel-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8ebfffe8a310711076f2d7bdc505e17c208634ea3a5ea03c8ebecf21c0544f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46eca5e01dbf97d7b3a851c9769c6eecd9d11efc62d4c66c8504cce9c3395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encode-route-deserialize-eta-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4849f20d06c8c3eb71f943fcebe44c6e682e2c94299b7465ea7d58fde0889c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wavefunction-procyon-archaeoastronomy-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d827178311a22de7b56e9e1c381516b8c0e5313a960ee72e8474c15d154b6e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-regulus-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e053063556b6ad51aaa35357c867ca4d8fbfbd2c51ef10bbd60a53ea1b3916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reject-book-catch-module-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b14b5a95ce44e95fff509182c83b828055877000a05d9e7b4447abe77c430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in export-resolve-theta-slow-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a82e294ea324bca472096d25a02a11bb79c13ed4c1729e7d4735c3cf05ccf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxy-cache-beta-iota-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ea476eadee6f737a5d5939604779845fb47a080e38fec660f39ad6b1e818e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-helios-bionics-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022ecdd26947cec0f0053fa453beff0e4313b5d2fef4cee8a9101980dac690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...