MAL-2025-187080 Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188611 Malicious code in permission-emulate-cloud-beta-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae103f394e7fdbda527da60d6130a3740474fb86bb87ab9c2cc1321b78626994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188797 Malicious code in prettier-luna-mysql-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3222eb9b99d6842ecb63911c1a6c1b490c2c17c005acfe908b74128d7328f962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188112 Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2a729962259a1b810fd5b3d3ebbcd7a38aca27aa52129940b9e07adc0b6483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190311 Malicious code in wezen-halley-less-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bcce6580c517f2e33e3a86f226fb4787f5a8348a800d827a98bff9f31c715a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189224 Malicious code in reveal-md-cosmos-apex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e367e933db82adf380c201474730be581cbeb3d554deeff671fb4bf308f2788b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189222 Malicious code in restart-warp-webdriver-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bf93b3651fd9e5262e28a4c025dfe14338cabf906f3143dad4f1a1cf765f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188340 Malicious code in non-blocking-miranda-gridsome-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ded373441292494a43935f760ffc243265ed07283b7797b8afa7f81f2530e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189965 Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dab104ace8220a6a4d15814c89357d5aee51b5d8f63e9d6df78d1ce4735a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185624 Malicious code in async-lynx-lithosphere-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ec24e13dc5676cd39326afe618afe0b9e4435ea88c7c601c8b2053d26a6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186020 Malicious code in castor-callisto-miranda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642a0e3b58478b1752d42ebe06e3728a14dd0d553d9e35c2c8bf429b0d2670e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187426 Malicious code in ignite-cosmicray-accretion-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898aafe008e3c13932d7554f16b7c52bff08415b7ba39795af33e4b574c3c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190442 Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188574 Malicious code in passport-coronalmassejection-vulcan-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b0eacc9625153c6f8ea0ce91170fe0a92cca5c46d7b2b5a14cded70fe59094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187048 Malicious code in framework-triton-string-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb411fea7c69a21a400b3efd4d901fb9e34e1151f1fe103fa76e85315c011e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190417 Malicious code in yakutsk-luna-nova-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247a887e7b5c2f9fd964d4f486657e8b0b2f0cb3db19d32b6971e95515ac6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189444 Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4571fcd4edc03bc69c09205dd532e4160f422b4b3a5e822f069e5c6aa5e483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186187 Malicious code in cluster-steganography-slides-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796ab19af8288ef87fc08c84b75032e9a955512cf76daaf4f031d635f7ec9e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190180 Malicious code in void-grus-superagent-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a8a9fd08defaff05f5feabf694f5b971ed1904512ea95cf7ae5be645b34d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...