MAL-2025-142868 Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146548 Malicious code in process-eleventy-tool-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7e1598e0cb1337cf64864e18bf8c8332e54ad5dcc8604ea85495eda850f911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146865 Malicious code in puppeteer-slides-phenomic-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da10031c67bbfc99b3021734ab754a209615452308f5b508f54f13c7cbe23690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141349 Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140328 Malicious code in callisto-cygnus-supervisor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7899891f8cc925ee20ff0796029e82e650d8e993a8700427c6e262950b1045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145064 Malicious code in miranda-yonder-css-loader-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8378467263bcd9a3bd8da17fda30d0ca889e2cdb63213a7c5b17da5e8173b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146442 Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-auth-nova-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e345ac51f637602bb21180a5a15e0c808801e9c9c5860e07eccb477eeb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-link-eleventy-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ebc1e11460b446c5c5307ff7dc44ff2b2888e9c27a939ba49a5527c724633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-callisto-orbit-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517427dceb0eb545cc4d3437a5e1f5e1e0a84c52309c6a0f22c3484d4873011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-telesto-blitz-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0359ea68b09faa00aac058a15089f39984b19b71e3754ae36811855066c40239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-semantic-release-vortex-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-telesto-element-ui-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653dbe7a5276e8673d5e93cb34a5cf9263ad039fe9cd23560d52d90219aec1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-upgrade-graphql-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c639cd0d7b8b69e23e078c6ddede7e447c6521c2b535b4b9f8efa3d1b50e6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146001 Malicious code in pavo-loopback-proxima-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ba9267ef221e23f87fd4055f40cd06c025a40cdfdd667fd85c1cc6574e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...