MAL-2025-146054 Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141719 Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142014 Malicious code in eleventy-ursa-vuetify-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7987d7d8b1c60f443936cd644f623d6cc0bc3c2008d2b2da8261c0eef9d19b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140274 Malicious code in cache-jekyll-pavo-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711485d592350a6a83a3dabdc407a543fc87d03c86434e29a65601f32010d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-capella-electron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a770aaa8b309314468c5271d2a10869434f06988c03f942917f434b7c866c081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-pino-supervisor-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469ab036f2df2169a72083315b0c33c7cf86cf51ed9219beffc4d2b3e4a8dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-apollo-cosmos-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a32d11266431e314e9672a090b6607b6769bdfc56b19dca1aa6f31063021a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145258 Malicious code in mysql-package-grus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669f966093aa106ff43ac0e966f583d676203df8eb2a44bd0e4e4f2d307d193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140384 Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-atlas-algol-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620c20eac5d9bb72b6d93c31c759d1b41add6bdb1393d047ef5a293c34052a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-nodejs-spinner-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b665158c37110255c5be34bbe5ad2da8289d225777f4daeed830c7f915a5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-eslint-config-impulse-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28014350609d845e34791b1fe1bba9b422e05f529a3222c889802154906250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...