MAL-2025-140023 Malicious code in blaze-hapi-cordelia-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148777 Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e5abf93e13670c0204d1213efaf2185a6c74e9b7579971752240918009cebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149185 Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145239 Malicious code in mysql-babel-cassini-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40143ba548c31793f042cdf340fc83a0f912cc7d59d8f0b4b7004398a8425066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146803 Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148745 Malicious code in tool-nightmare-geckodriver-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9973ab631522b2696dda34c1e449efbcb9782facea5ef651159b5320ca7ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149312 Malicious code in webdriver-manager-chariklo-aether-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565f76f2b1e7bfaeedc6b3a660334f8e11e8a8b25d0bc5006c3522ef35a227a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144887 Malicious code in metalsmith-polaris-browserify-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeca10eedd2868420a67a14a83dd8861e9350b5413837f1fac9c3e8496cc52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148852 Malicious code in typeorm-node-sass-karma-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bee29825c7e1d60e8b87a0c8cfb6f49d8d17a82d51d8b383097fec2a432d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145628 Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141172 Malicious code in cosmiconfig-avior-got-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fc7608b3f64152fd30fbfb841a094ffea14421fddfcb55ff46bf7d5f7aea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146269 Malicious code in pipe-release-it-hermes-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463e48d072f87e12dcefa2b95cb79861ba03d5bbbdc8dd98e5490abf583b9d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142867 Malicious code in geckodriver-indus-testcafe-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6d6d3632fc7594ebf9054a1009c068360978acc3d27d397bda3fae304f1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...