Malicious code in webdriver-manager-dione-graphql-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6fa48966204e7e4ec2f499960681d755ac463ce41b39eb2a6f9dc1921223fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139995 Malicious code in betelgeuse-octans-venus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571f015c46e84fa6fba8638064826f599bbdff229f5ad4a15ad7405eddb455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-terser-spica-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d06e1d74d0e755f921a537a0e0ee13bcb86925886eef5f4deae57cdf62524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145825 Malicious code in ophiuchus-kinetic-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cead306982c4e53b259b7fe60ba0baf7a14b6ea52db778371e3b45751817ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149571 Malicious code in writable-karma-kronos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb358fc9ebea40fbbf076585b22fed306191058ee9233a9abe101fbc18c1da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145729 Malicious code in oauth-eslint-event-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912e33dda74d1110c5a19a58e60ba349b4e47d20b5d79ea2ab9027ea4b4bacc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149662 Malicious code in xenon-shelljs-chariklo-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbac76d56e5ea533334cf5a8cd66bbd396bc572f97cf384097f8a2e9f791d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144809 Malicious code in meissa-ini-xo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc70c450a64a22896397ed0c5c435ee915be7a5a41639f799b2c2c55782609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142340 Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149005 Malicious code in upgrade-celeste-subscription-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1564bb9d0715008853e1d1e6481753b878a80830a3c8fca82c3f2ed71aeb9355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144583 Malicious code in luna-spectron-webdriver-miranda-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e4122b6e302ce6fed13782e4725c133775ac1f71e3474a36b3669158be714c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147210 Malicious code in relay-sedna-gulp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c770ec13334189a45aa0fef3674fecdd3a537588a7da860f88556aad8ab09dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141772 Malicious code in dotenv-safe-protractor-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8193c16d4b5afbfe238ebe608716ba96c5fff7255b801cd103a6d0ee39f61375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146872 Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...