MAL-2025-149474 Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e464d4d807b9eef9069ca788254eff0f8533e1006b633e282f18e6af6ef0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144626 Malicious code in magellan-callisto-eridanus-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffa62bf897d77b1bfeefc417dc64b576f39b9b2f520a273b8ffad6c48413ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145442 Malicious code in nightmare-node-config-eridanus-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677d88fd923cf9115bbee04bfca99325c4c905ce3195c80e37a50eedd33ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145574 Malicious code in nodejs-proxima-link-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63188598f74497a2c47b3cde3e375a0268745c99100ec6cefb8ee6a96c36a71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141173 Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-perseus-hugo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cec9ecfdfb8a0c2c57e573bfa90f86c4ed7013b554937e53b33494174a0e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-ganymede-tethys-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6980f4f142809989641586af71b87ec16b320ce93c4364d719427303535474e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148444 Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141126 Malicious code in cors-hermes-apollo-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8bcb589b171f7dadbe0f8b5e826ef81fe76e4af63acc03e1c01fa3082a239e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138581 Malicious code in adequate-purple-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65d9ed90c6b0e40b3541d480b9b1ba126f97ee1c1a5ff0683824c7d064fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138903 Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kepok88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b40850a69cfa4ec223ed40fec022bf4f30078605435692a8e074dd003107c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133466 Malicious code in fauzi-papeda40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906807e505d4bd8743f07e83b89d5839763fda6e73e6ef847f7de6e56c0ad0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133530 Malicious code in fitri-martabak19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48efa69177da2ba85282120d1f078bc2a840f3ea56f0006a5921ea39a21cac7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...