MAL-2025-148145 Malicious code in spectron-webdriver-unuk-eridanus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036ddd678cdf1efc69c67d7f43d50ea03985902013f5fef75ae1e917965b269b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140199 Malicious code in build-yakutsk-relay-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c90af33d81fd2bd68c1e36ccc3c13600a08f9957b7fdd7c2c3a2bdda5e4a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144779 Malicious code in mdx-sirius-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264cb34d314b13266791985fb1072db94210b9a991abcad1984a90978870dc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-init-less-loader-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b5ce77942656ef4a6d88bfd3d34f499d4f545e62466910015e1687c70bf490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-acamar-ora-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79491fe41ca22980491277a8cb5b34e805fddf15f0319d9c1ec3bd5090dc91e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144390 Malicious code in library-thuban-galaxy-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3662286e5cc98f31fa21e440791aa479d49ef39b59c4043f6bc39600a6eb144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141350 Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144055 Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147246 Malicious code in remark-hydra-rate-limiter-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5576b89ee3feaec1d6baf641339435fecb1de9058dec51057e00bfb108b9f7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139140 Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138828 Malicious code in late-white-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eb10c7af4c8cef448526af282d5089bb64071b81a7fe476c4f005710c560fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rojak80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153b8e861e75b1a4413eebdc853b7872a6c6e5d74e5df4f09da70739ea45363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07b1767d54cc8ee96cc3b6d42698d3913b8d30bf3b850a08c1b7cfda7751704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getuk41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a1cd65b707925c21113d76e00020b1a70f5c49de185fd455655ffa4492c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137085 Malicious code in static_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e2f771fb1e564ff59e85b6d737d433e3cf1b0428588f1062c567ba0213ccee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136042 Malicious code in okta-getas47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f959cb188e70e623d1e7447d09c24f60d3436f5cd649cc3dd709cf86a08263e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137133 Malicious code in surya-kembang15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a11578acdff8b01fe2c8fc76796f582b4fb7c70648c4f2d9ac9c7bdda3bdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132221 Malicious code in bayu-otak-otak47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc59da9c21ed209cb5150d9b2fafb0647e550c5c159ad84c696b42de2ff9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...