MAL-2025-148267 Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149588 Malicious code in xanadu-await-rehype-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb456e8d781aa45a1dacbf7f30970b88acc27ae993d3a50689322268cf4fcef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144699 Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a451c521b719214daab4309206ebefc8786247beebe36e90572871635519afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139297 Malicious code in algol-levels-socketio-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24842ddc29a72af81de475accacf34548de3619c4b5baed519de7e27f5778307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149217 Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dbddf36a8477e622bf1732299f16d35bb423944f8678a305a18aa199ba0ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-node-sass-titan-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aba470b153d913a8363811c0bdbc4300aa4833b9a41af28b0d7a3c678ac301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-sagitta-proxima-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa753953218b29386b71fd301e0f77b7ee751f4c3fe229d8ada58d8b4905b054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-pino-pretty-publish-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a1c951fc5746b594ffe7ddccf0b1e29860605ad3eed07f5b638f0de0cdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-child-process-xerxes-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e764918f26ac7cc377b1b33c32bd3f56120a8f487b5adf3b2d817e3582cd07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-algol-phenomic-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ceee4a27ca9ceb755280a9eb2c27cfdd9af03cdda92755b97bf6c68c50d382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-exec-sagitta-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5652eb806bf9840e686042adc13f54c667dff2f510804fbdd19f2eaa4763379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...