MAL-2025-139538 Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143233 Malicious code in helios-grus-morgan-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf6eb17521dfa305a33e0990d686800f538681feeae23d261273fa6889f5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140515 Malicious code in celeste-nebula-less-loader-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75d25e2d2359775fb7bfbd299dd722f19cdbb3c9ce481190d76ac8e4bc43d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146512 Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141982 Malicious code in element-ui-rocket-vuetify-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d561aaa05ed4922293b5ddb3e2defe3f7e4d1b2e9bf8d593380104bd3a72fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145024 Malicious code in miranda-capella-electron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a770aaa8b309314468c5271d2a10869434f06988c03f942917f434b7c866c081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-dactyl-callisto-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1d8e20d18a49436dcee02fa175419ba3d128066b6ef56f3f7176a83d324d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-xenos-process-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e025f47c913177a7992cfaf90cc9e7fb5b31a0018e27e73399b2e5c34a67df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-child-process-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79b30a2e6ae370186cd8c40a4fbf3f614607b0ef43d4583a5b007fc3ff12f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-jest-phoenix-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da9d26484cacf036aae45df31ca9b3abbfe96808215b041d3f959bbb10d4216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-rollup-plugin-vuetify-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120818

Malicious code in venus-express-lynx-writable npm...

Malicious code in procyon-hapi-csv-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c05bafde1be0d3c7cd14dc9a7063a15613942905627ffbbd560696a78aef88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-sirius-request-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ecab9e178161b631a734be3681ba71114cffbf50a4874a3e80a01eb246d304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-gulp-proxima-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ba965195f1d4a56aabb0fa309c472adc314ed7bd6605574f65f81aac4897af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...