MAL-2025-149377 Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147292 Malicious code in request-despina-cors-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2babe9192364defa8cc0022c5e6f27b52416c1f9c28060f887e847f1cfd9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144194 Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144707 Malicious code in markdown-pdf-rimraf-kronos-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cc6121c1002f967fcfc5df8b09150cb98ec5b80aed5551c892f0da52ea61f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148902 Malicious code in ultra-node-config-parcel-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29af01598b9218606d15210c2d0adf701d386ce92a2edc0b8179bbd099a3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147966 Malicious code in sirius-pavo-xenos-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38a4715dcb29d3f768ba1b92ea4fd7165a4fea4b3280e36bd8f66d64326d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147683 Malicious code in sass-loader-rate-limiter-aurora-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ad9fbff58328e4c83ba974785be6b6070e9643bf90ab193c6780758b34c36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144974 Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8d6e129f1fb2b77342ec6add65d3ccbf071b23d65893e28f8b00c0c398047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-javascript-nodejs-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17304e2a6bbff648b6d32463f834700b906ce3fe91ce25015d40c032aba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-callisto-colors-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbebae1be459a44b6204915a1718da722ca6919bddd78b6ec4410cd9fb6cdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-arcturus-pino-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270b9ac19aad85ea7e97512b7bb3c2f8a2d344649d14905875aeec372a852e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-prompts-meissa-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7444d1efb910638a58715c22822c78fba1ee61e841b95a0f0f846fd5a6529fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-sagitta-proxima-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa753953218b29386b71fd301e0f77b7ee751f4c3fe229d8ada58d8b4905b054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-bunyan-cache-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a502d3f6c16de1d61c3f028f38278214faff3d2fb4db6a0eb034fd5efbace5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...