MAL-2025-144526 Malicious code in loop-geckodriver-ceres-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb5c2b79743fbc44bd02a924ba1b78e197e9329c3760c23d43ed4d5e202d670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143686 Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141458 Malicious code in dactyl-webpack-loopback-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1b72b113f1eb154c1f62e42afa4cfbf203d67582c7f78aee71fcc624891b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142451 Malicious code in fetch-meteor-leda-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed1f615cbcd2d3bd47a49aaecfa6aa05fd3a94d0a42a40a9394bf20393af4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140706 Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141509 Malicious code in delphinus-altair-farout-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dec0a7142346b708feacb4f333b65f902175868929901f20759b12f56e8da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149818 Malicious code in yildun-nova-leda-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05ae0cdb022e3b71301a0323b96a75c7edd172085ff157e6da24b348969c13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140430 Malicious code in carpo-async-ganymede-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30455e0f409485a1dc7ed4659e0f3c508d3a48c6b811106230b3a148fbc8881d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144692 Malicious code in markdown-pdf-ganymede-miranda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0ace5bc12f5a55cd77408af6d40fa214272a2a028db06f068c6a8380eb72fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148797 Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149418 Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148687 Malicious code in titan-nightmare-jabbah-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b10e2d33cca2b4e42942e5d835ea80b43ca5a62a1ba61383c014dc812bc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145250 Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140025 Malicious code in blaze-lacerta-semantic-ui-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a663bd504b92f9c6b5898ccaab92e415af2335a8bf3ce22e06e7b89eaff5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140134 Malicious code in browserify-mongodb-eslint-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626993bea82b77bd813c972a1d32f6381661257bd59fc76b4260c694cf58ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141170 Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...