MAL-2025-146983 Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149065 Malicious code in ursa-oberon-antares-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5bc84bc4c1d6cc887b8ad39364182e98b520f3696b8bca8c88a8fd6773b484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-atlas-cordelia-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c8839f981728634c7a122a4d6dd3c0fa6ec46fa24d71e759a5a59c609f888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-got-cross-env-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff9bfacb88160eb86cdff05b33e80ccc35019431641ff471b088dbeb4ff399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141438 Malicious code in dactyl-cygnus-carpo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac45bb86e1d18560f5a8960328eabcfeee921c8fafb7d8f868d60bbdbe0ac1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139716 Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147228 Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2823e5cc4583edbf1a87933cbf7ef0bdd7e810c0ca8fcce7267e6dd14fe9a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146061 Malicious code in pegasus-upgrade-gravity-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66715409b059a0c688b80772af4ac8b0e473a8d2d8a8d25d96b2b1236cd73425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143230 Malicious code in helios-europa-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4467f1cce390ba3c5144631bd0d5d727f271666690fb351ccdf4f3dfce29e96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144286 Malicious code in leda-prettier-antd-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43466b1e90ff3b3aed8cbdc1dde1a86542af225d18ee73ea34de99f4f4ec5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148780 Malicious code in transport-canopus-ganymede-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d4ea70999468b91a3ad1807ef42db3a6d96c8f537496bc146c46c349a200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146021 Malicious code in pegasus-chakra-ui-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7be2d5896071aa511b4fddd7bc90af4dbb750cf4dc6aae32460667ef98b4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144939 Malicious code in meteor-start-aether-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301d09568ade4960569bffbe5cb6360049a99677385189dd037333cb8cff6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149309 Malicious code in webdriver-manager-blitz-browserify-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc0a4eff4c39f48a9eea63ae5964eeb9d4723510f3e9bd81c14c04e40883a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139283 Malicious code in aldebaran-nextjs-ceres-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec61e02727651739214315f5bbf7d1e240a17bf20628ececfcbdab8a6f15e527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...