MAL-2025-139214 Malicious code in adonis-norma-install-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 166aa6ab24326db4a581073bc5c59df2e44474135e0db43f08c60e4488724a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141161 Malicious code in corvus-node-sass-delphinus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469e07d52d72f16f42c33f9ef67076d631925b73721e56baed5037c0dc411074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141220 Malicious code in cosmos-sirius-elektra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142855f368ae9311f0496c0eb37fc7d3e2721262d32ec4861a9a15af7ce9a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144597 Malicious code in lynx-node-sass-rocket-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72e145677f163af94a10b4643859caafade9742875b7ddf990815d974d4a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147232 Malicious code in release-it-quantum-delphinus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68fc559ed11c01b8503c338131487afe6830e3c1af8279dee6f84371826125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149130 Malicious code in version-altair-jwt-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf1dc048a8380f039444fe39e20ef82957c666685a75b24d72d792e31f15f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139911 Malicious code in barnard-luna-pulsar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a6771f76faef39f94576dc35d54f956339cdad234d7db3fc5e7ce40604123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149744 Malicious code in xo-auth0-sedna-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6115d7299c1ee0661506989c8b57a5b3843cef8f80d738a09ca55a831cd2c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141241 Malicious code in cressida-repository-mutation-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b893e5d04b7484d3c28cf6b43aa463dc842703409964fa8d83ffa865a9bbcc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148961 Malicious code in uninstall-local-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555721a317e20b9a35f22afd4a810a69c596a01db3cc09160097074ed711fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143794 Malicious code in jabbah-terser-webpack-plugin-achernar-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e454a3b4f4d5c66dba0bfc9697d1034ffa85bf2cdc3a171bffaa936b9ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143791 Malicious code in jabbah-spectron-webdriver-procyon-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1135c573e6af1a5857f5370756b236e890589ee9f51d736363bb5287226b1f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149683 Malicious code in xenos-link-spectron-webdriver-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d936bd89ea3139311a716abf71d65c328f400082c13300bfcb336b946e2976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149664 Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142120 Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142654 Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...