Malicious code in geckodriver-ceres-celeste-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952704ef7609dad642d9aa825a3fe083c766943a6dfa24ad1f0f7e2f82789bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-mutation-private-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127757ab576fa8404175dbc8ff025fa35671e77dee7e5daf3268fd955b65092e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112743

Malicious code in html-webpack-plugin-procyon-airbnb-relay npm...

Malicious code in magellan-miranda-element-ui-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478640b4176788ec26ab2af3eaf3a84218eefd1aacee687df057a7012d20be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-dione-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9e6c2b2b4d710d8a1f6df5d2630dad09faaf289798dc90e320c66da0f8106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-polaris-rimraf-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d7e5fe0b742c906a629ff41dcd30079db5c74b5bfaf1475bee365ca52b4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-nightwatch-got-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e9aec448506ac282ea13c172e7921e650b5cd3001c93cb67df38d502291a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149639 Malicious code in xanthus-xerxes-zenith-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaab4f3ea217467a70f14e891243628cfce6deba769208c9cb54a6e06db8786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148054 Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142580 Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143015 Malicious code in graphql-webdriverio-neptune-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da258c0f433f7708e70b770c2146a517b148c8db5ab654f3af6f60396a900dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148181 Malicious code in spica-terser-configstore-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18813c3e1ff9705d5e8cc26b5c1dbbcfc10f8bda51eec707edc856eeba57da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-jwt-sails-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb006c2b2793dbbcbe5f7a7f5b52c5850abecd1b69042e481b38dc15078b81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120233

Malicious code in xerxes-astro-axios-rocket npm...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144118 Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...