MAL-2025-145267 Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145092 Malicious code in mocha-sedna-css-minimizer-webpack-plugin-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8604a20f4f2d848230348bc9bf7b4018a8578f21adeacab02ee39ba2a9d08702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-elektra-meteor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec321cc8d8a1cb04ceb61935280a6bf3e36c4d2762d39ecac3715152c646fce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-terser-uglify-js-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bca524c147bbb2c84bb99e0bf53400154dfe38d61b8b5fe6311f40c3c42645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-firebase-async-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa716ed80e114bef0b9b7b9d962f271faa21538c3e9d5b98a4731097134c33c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-nightmare-geckodriver-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9973ab631522b2696dda34c1e449efbcb9782facea5ef651159b5320ca7ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-cluster-firebase-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a574e09921536b26617497090092b3d6990d9ca20f1c4fe86560fe0d938eaa0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139303 Malicious code in algol-pegasus-fornax-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd56da85ad1b157c8aaf46467c5c42f3a7eea259284a48f2e7b04f0741baf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c01a2ba45f11193c6ab2f8a15a4a8f392c6e7ca344158808713a376df8e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138769 Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3140103a8ae5ed88fc599205594e17f8e63a151d5ba7e00b1de6828790605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e92a1a3d626868e25efc73914971715c9b9610a18cadaa4a56749f3ef90e514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dadb200eb9055d39dc7fbc1ecdd6e2f8d605a275041cf4d0279c2a8666f9ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tahu55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1557931468f25f2711ec4c70a01a733d7b7e4c6659334fd60769fc7eccba5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137476 Malicious code in udin-ikan96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34931bef1fdd0a94460d300823fba826ab07f69f74029cb94bcd7f293d74f6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137262 Malicious code in thick_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae0fcbb78f276aad6c55141d7943566a26ebc7b0ce9eeb13257dc5d7089ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138493 Malicious code in zaki-sambel34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b73c730a54fe3731ff73f8a8b7f51f93d1f360e65d19c37001202c6e8243449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...