MAL-2025-149317 Malicious code in webdriver-manager-eslint-plugin-stream-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375e9010bc941f62a7a27223a5b5bf6a50bcbe8fc6791230809991387993d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145531 Malicious code in node-sass-cli-phenomic-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb981119709dcf33d9522500fcd9166fbfa538a24b7754e164370e13c45cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693f28f8bd18b96b7dfb6dc284c2aa7df716c48b276888bd6a294330f285276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-node-sass-lint-staged-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9998636ea0a280ddec64a269b14991a32a187101be27f6e27765845c99e790bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-prettier-sedna-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25680946475c4c1a41f5e60c013ef2f4b3be1a332f536d1c7ba1c3de57f4aa67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144371 Malicious code in library-blaze-heka-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51b8af5044f50a93459386244d570c089c10f5bcba81f155c01e484f9c28712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-library-markdownlint-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2dece0d15234a8401aee03b6b62a2d4d8b63b270a0d0f6633032815694f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-orbit-grus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0325ce27bd89abd4c5ae9d6f7e37c7bb7c373892a59f09c7ff589164e0edbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149065 Malicious code in ursa-oberon-antares-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5bc84bc4c1d6cc887b8ad39364182e98b520f3696b8bca8c88a8fd6773b484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139955 Malicious code in bellatrix-resolvers-inquirer-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858faf8874f21966c54d66bc8f4a8694de8c3a9272f66dd24323ebaccffce5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140239 Malicious code in bunyan-apex-aether-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b92bb9165108951399e68cab4dce7a9d02873378237e7e968ae80e51111322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-cluster-sagitta-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549decdffd9a9460d6acaf8c1a3149b65fbf38e6f27108a063dcaaaf982995ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-flare-config-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59148b28e8f70bd60c5739bb9087be6ab6dc606e8008e55e381d0e6c57ea5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-slides-build-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18801354375226d4226112eec2d62c8dadc9530120fa7e6ecfc8a365612fc872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-eslint-eslint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af85ec1905427d26a8cb76ef206a0a384fba45266e161ae68cd007fa65ede164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...