MAL-2025-186068 Malicious code in centaurus-test-rollup-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6148929a592e573d8d4974b55e488857355621d8e6308aabba97db6b5521aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-decompress-scale-throw-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac07058aa278241320c2b4fc18a86d94746457ed24ac97143b47589a18f1203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-dynamo-supervisor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2892eb4fc40461d42c2bec88298e5cba9f2060177b8aa42e3bcf5b4584a481e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3cfc3b8c341c20b4e8af0757b87d8eb021f0af5c7c338267d8024659a8cd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaa53a75ecaa03edd7aa29ab318da2007e7edc0328de4c86c5f8b43089add6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sails-development-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f009141574a4ca3a211c93ce3277437cc7eb9f1f2db531117da82598c90e901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-dysonswarm-node-config-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cfb3957e784c8f64be9d84de653a91b11d80d6ffbf26fbc120b8b24133d2a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-carina-astroinformatics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014f330645c8ea66f04b127b546ef18c580803da86446ae01e44eb618d71419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taphonomy-phoebe-mineralogy-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d0b38ae49da146c24c104347787c4c7f2cf17fc32dfd0d2761d705c9870097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-protractor-nestjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9e51fb2a7e3a96397a4f164c00e4a75d72efd329525fe13fc14a9c7ef50102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in debug-tau-wind-gamma-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582520f95fbf0e1692946045a6fba130b71d303856ba7dde1b89b2b426d30d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-selenium-oortcloud-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9c392f64679172f81a2fc6e79ccf979dfbf3879ed0696eb339f8e1a4219167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-gatsby-janus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-zenobia-altair-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4aacf4eaaadb9bc25062197eb2c1c852cdbbeff87ba8577ac4680b6deda5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-tectonophysics-archaeoastronomy-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773f15c9491f15ebeb5ec4694d22cd60e22a5c6baa1fa6d6cd492aaa193aebd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-alphard-nova-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d124aff39da9d10edbd76e65c207c1bb625940619d25f3d00674c4c381c61ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in container-encrypt-kappa-virtualize-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f797b4a9f89f991872b9512b2adfc5ff57180b4e3a26fdb86bc508e15a96a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-winston-thuban-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5884709882a0901b1904e76eb744c4c9941a1bd7fac9620ad40f74acc518a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...