MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-markdownlint-vuetify-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16996f535c5075c1e842c66c5c0cb060e543b2870253fb635734319b4c397a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-mensa-vuetify-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdaae7c1522c825d5fc88e7dee72b39025eedf7b9ba29e41812384ecb3969fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-commitizen-mocha-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c9f78b8c8242cee364e3e2ea4760f0e8414e5fe097e2a049ec4986f542423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-epimetheus-dynamo-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478efc3b4b38da17d0d9e7f57a3b8184ba903e348c6c29973c0d063a315656c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-chai-babel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9f8282d541ec1f5afb3ae6868da6de795ba3b4d3ccfcd7ded668aa567b1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-pulsar-sqlite-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e248f5b89242e943362341bbfaf38bf9eda746454a0e845ee2aacaceed9773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-rimraf-supervisor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-frontend-jasmine-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd8b8ccab7799216be46b4cf2e947e5092a34b8055fdaf5a7de01224ce7b9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146189 Malicious code in phoebe-xerxes-gemini-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161fa9148c66138aafaf9404db9fe1a48ac004158a880e9c8a02b1107ddc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139645 Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149572 Malicious code in writable-mongoose-dagda-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ac53712435c415c5022e9db0c005c007c91f0d750139977a5064767e5a3578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144013 Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142131 Malicious code in equinox-playwright-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5f310b893a67c3d52cbcbf20c0fbf6d4ba00816213bf8a73618b3556d2d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...