MAL-2025-148139 Malicious code in spectron-webdriver-reveal-md-enif-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370180c2f129f15a2de150851321c58aca4d76bfa479fa7d138492a2d75d83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-unuk-version-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08758c756619b48eebbf564bbe8c20656ed77a50701a913c3d2bb123e47c1313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-sirius-materialize-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7235eea9eb78c21f2f744eaa8e26d1d66cbfc0176532ad5b81988fbcef7f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-perseus-sequelize-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a611aa258ecfec3409c67e60532f605f7253087d197c70a8d32c2c2f6cdde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-private-triton-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6a9a1c5dcde551eb14e7da9977fb75ff1dc416e1129cc4554098611f50076a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-sirius-jasmine-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a815edacfaadc13f51e07437f41fc2a931ca4ec7366d1b29d4e184bc67a2ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-promise-thuban-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3a02378c07d03f9cd1d1ff333ce88e7406b6873a760e6af1912b105b1425a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-blaze-rocket-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5472177412ba005ec7b22767f42c1542b3f4d4f60fdd02d901c9d4defdd5ab8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-triton-passport-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574f46ceb52ebd9ae387541a9853ce72395d9ab6442cc497745ea6bf12d08ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-antares-wolf-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6395df5bc3336a6a4d7f56b89b2d327305c12579b282ae41a212ad7b8aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-bunyan-gacrux-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce89ccaba7dbc5aae9691301466528ad1010928962ca93c3b5cb7236973b146c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...