MAL-2025-141957 Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146742 Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-wolf-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365e44d466f6d5e0d49f8b799d76aad793d40479391043c1ea5114d5913e01fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140582 Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142168 Malicious code in eris-dotenv-safe-express-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cea3b7c73078f287e22f895f9b13af68cee4ba61b7c950d714e05f780574fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-aldebaran-toml-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d65623a858a86f5a8079b505bd7222e63f14ec06fef9d9b87f4b81e67f018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pegasus-janus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22985f2d8877c984e1d165dd6767a367d4f5c8488e58828bd17fdbb35bdb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-gacrux-bulma-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4181aacdd872a8c8cadfe1311cec3abb2ab56bdbdd2d394d5178998e429bd21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-dactyl-exec-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e093d0cc7d469c010330f2fae3ee59791663210739ce726a1470a5457e8ad63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-callback-soap-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f7eb96f887f38576869f47cae2da7442b823c576a30daec11038ac9b362dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-element-ui-buffer-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a508dc44f6b649dc11aea2adfd3e0733d721a23e86034b25f378d3064b31a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-halley-await-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49bc547d565dff9a16ca114112f58261d335b57e56672f1fd9262c73fb5a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-octans-install-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f459054cf2b975246d8f9f1230a9f2f32ab9a8cee1ebb4b00938c60accaa03fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-antares-neptune-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc65152960b76a24c132fd022c57baa610440d27e99fd30117a7f067c2dfbb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-mocha-pipe-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98eab42201e22336dea2c31ea0ea8cc9c09882c65535f3ee18ea10f719c32e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-repository-json-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb7a850e0ae08b7e3a37d138c9c493d2f4702ccafb36b240ecd4bbfa903597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-tethys-lacerta-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5ff0f33b8c4e3d791473618cc4821b1a690ac34b74c6f64375aa339435f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...