MAL-2025-140798 Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142694 Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140659 Malicious code in chalk-ursa-leda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142500 Malicious code in firebase-io-webdriverio-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905a337a5a8d66d4416fd0b63bf9a60bd94e7bf2c351c452500768ec80639ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141712 Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886a1cb7d0a2d8eca7761b048b1101fb32a1a735646becbb7e5445a2bd2e4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148318 Malicious code in stream-graphql-levels-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9dd5acea331a6348476e74895b9b765c53c8fc499ffe692ddcf3f700949b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141768 Malicious code in dotenv-safe-parcel-convict-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3887411420b633571876d73bdc8d64a712e76bcccdfd293ea444bddc36a38c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146881 Malicious code in pyxis-kinetic-hapi-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba961f4b13aeb2e27e4d621d21841974bab64acd975b6f56d1165d1648b1178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144519 Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ea4b32d4c9b2d2ce285363f2b37f3939d71151d71bbfea24e5c4bfac821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141570 Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147388 Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142087 Malicious code in envconfig-triton-perseus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868015b1b813739061cff576bd6f2c640eb715630e7893b555ca36dfaedef583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147258 Malicious code in remark-wolf-jwt-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd162f05a085a9bd6f3d5eae4eb71f22530b58420b2769e141f54389dd035c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144678 Malicious code in markdown-antares-repository-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad31fea6b18f08c109e129807c4a8e2b90950344b0b6650cac6a40ce866239e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143322 Malicious code in hermes-radiant-lint-staged-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7c4b8eda72fbd49d115deb7e3aefa7135c2d9a89840c246be1220d5b492d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142808 Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148026 Malicious code in soap-loop-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66b23fbc8d76abc565f6000d54112e22f65b8e5b2b82039d916415cff79e258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145384 Malicious code in neptune-umbriel-subscription-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458fb1c9c88b8657ff067fec28494d60546f71a745a4f0004bde4c4ed685d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...