MAL-2025-143125 Malicious code in gulp-webdriver-mocha-yildun-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e94d6ea198d5df1a1fbf2ba5bba87ce888ae2859eb0febdbd54e436e7238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147600 Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147825 Malicious code in semantic-release-fornax-xerxes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccde657a05676a3e3b9f919622689ae943a012f86450f132569c5866c8e60b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147328 Malicious code in resolvers-json-spectron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786bd9bd9011a5a9ed2776957a9967d5e46fcb7499fc2695fcb8bc16f9045b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139932 Malicious code in bellatrix-cosmos-pulsar-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d5121b16540457738a85a3847605438e554246e5eb1c5f9b09f1a9ed821287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145914 Malicious code in orbit-transport-pulsar-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140429 Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145850 Malicious code in ophiuchus-vulcan-quark-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0d097941e96216c73a95323d1fdf14c3176c5863361cb6c73a54a9d94ca387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140731 Malicious code in charon-puppeteer-eclipse-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4dd5f4eabd9a3a7dbdd1b6c3808038d29ae76d949ae2e15e50502ade7eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149237 Malicious code in vulcan-gulp-ora-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d843e4caca914f0ff69b775a2372f42a523768aee1e7918f4b8c6d01501f8268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149840 Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144155 Malicious code in kaus-socketio-blaze-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271214cea16cd84986d48c937872fb750393b1a48276a7270a1c97950bf70f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142319 Malicious code in event-pegasus-library-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a426ee6e9521bebc28daf065df779710592df13309fc8ad43f08f70caf3ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145696 Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094ec9940902eb2dd3dd6b6b2332f3acd59cb9f6135a3fd2616bee12fb70677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-lynx-meissa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810b5250027e2e99eceb0de4313e2e7fa943040bf86079d15432fba5650741b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146999 Malicious code in quito-ophiuchus-jabbah-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66999af8e61119f23d545bd7b09220c72d04567456e7c544ab5c0b4e0198d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...