MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142038 Malicious code in enceladus-toml-dotenv-safe-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0747b24bb674b7b1e316820fe5ce023f2fb526a9a31a66e4a17aa62211ed6682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-hyperion-meissa-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2f18b7a7dd6a2b41c7c3ab074d80a3cb83d5aefed647bd05a8a3ab4c1dddf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-javascript-remark-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315149a5727b357bfa3b12aeac62126a15734f48ad61a49ce8b7ce4875619e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-webdriverio-build-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a769157d32d7855f2e263fa2a168e8f0f4b9fe1cd1c23bd76f0fc64dddc57abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-bootes-capella-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6ede5dbb0e04dcbf0377128efc1b0a5de122059b8148a2c1126144de4294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-winston-webpack-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-local-node-sass-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef68d63ede9194c10251a12380048f4bde948d90eaac0eb971d9cfb2170fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-build-commitlint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdd3e069afa219b7f200c4de2044062b61cd5636880c70289141ffc156b82ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-miranda-virgo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8823687b1a4ad4db6d07e11c07334da46f31bbe82d7d061ccf946caafb16fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-hyperion-chariklo-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb0574747e317160ee377a0984d32a00b5da31f25184452bc5b52ba40041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-electron-adonis-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40f9fe8761dc42bf6fd3e50302ad90e802d796675c661e1721ce13f5db58e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-gemini-ultra-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b8c852905587eec75361da9869de6474a78215837a3989d078099f0705f454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-pyxis-janus-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666e29f61ab6ce0ddc1bebddef7621e12b483e2d514931737ba2ee049df942c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-barnard-resolvers-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea66277b18e096e1d2a0d7d62b31f94cb16b2d90a1da10ff12c28b7a3942e44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-elara-yonder-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fee22a1d8c332151e77e19d5f4de43f8842efedccdbab6bf08ba69d58d5140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...