MAL-2025-149337 Malicious code in webdriver-manager-webdriverio-build-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a769157d32d7855f2e263fa2a168e8f0f4b9fe1cd1c23bd76f0fc64dddc57abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148539 Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140037 Malicious code in blitz-celeste-slidev-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42c639afb347d7ed48126244240c893feaf0e464a8b9357fc1bd5d35cf6d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148210 Malicious code in spinner-spectron-auriga-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9578d72dff0c43f30d887dbf39787ae56004d55f4d197d5557d68d9385666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143355 Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144407 Malicious code in link-got-weywot-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd7b215496fa678437cacf6b90f5388e6db1775a5f0054b9ad223f441689ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145590 Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147493 Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142855 Malicious code in gatsby-yonder-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691b0ef996eb6991d3b134c40d40b4d6f52350fe5f6d04289c9efe2b264e58dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140479 Malicious code in cassini-winston-helmet-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5810fffb3265738c79fca34580cfbce263e1c4b04d3691104bfc10e5393c5a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146972 Malicious code in query-middleware-promise-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044b110d5059a083b5f257a7ddf21a013cab764059814d3d97445da282705cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143698 Malicious code in io-geckodriver-local-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e80c4adbcc2eab527bd2f47a79d7259ddfcfda4646d1a6190d4ce259b39a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005c81278788475a3160072e40e95d1e188a221242e77d5c9944a9bd6bd1ed7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...