MAL-2025-140776 Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149335 Malicious code in webdriver-manager-standard-rest-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106eb1a1e61fd11a05d8de1fe363d28f115065bf4e220f6c38373f9776c875d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149830 Malicious code in yonder-altair-commitlint-config-angular-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16de385d262c74c14cb8a9c647ea883875717271b69fd0efb991c16a3679a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141268 Malicious code in cross-env-restart-ophiuchus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02107644150263cb3d55bedb6b19c1c298c98e216e840814b6a277bdf849f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146789 Malicious code in publish-impulse-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195a18bbc2c340fa49445c8f98d48a8db2dd0d999cf1608f8d386a97d2d7cbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145608 Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140300 Malicious code in callback-levels-cz-conventional-changelog-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f7ffaf5df406c08f6fecc779f7711712a13207fcefc1f71ac2fa2f9a3eaf1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147284 Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142054 Malicious code in enif-middleware-bellatrix-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127fd7d76d0f3c78514f671964e2d7fb10b763951b5f7d131a4c1811348a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143835 Malicious code in janus-sirius-nashira-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9a413016e30e6e0c4bfd6ba48a24fee36358f5ca19be2716820031424ea375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144714 Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140177 Malicious code in buffer-venus-mongoose-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275bd9bf8bcf372c892a5b5e40e92a005b985000fedd2730df4f2ad8c4628dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148540 Malicious code in terser-triton-element-ui-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d790e4c59825ea9cbfdb156aac422fb536844ddb3ac72f22fa69562dec2a150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145539 Malicious code in node-sass-foundation-helios-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa148084f3aa7bdcf939f75d7ed0963f845ceea2b4be00e210a62320dee30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145057 Malicious code in miranda-sagitta-package-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94593febd7aadb0e0468641864d190fbd3d0a0ae43e07650fc889f6a630caff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144987 Malicious code in mini-css-extract-plugin-pino-changelog-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc3b096ea1cce54a22723ec725ac1abb7d37238f0f9e96fb9d1bb568c06d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...