MAL-2025-187038 Malicious code in fornax-transport-webdriver-manager-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221b0df03709f994b5ba17d503c03bd119a376ef0490fc537e74dc1413048ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186466 Malicious code in daemon-old-mu-interpret-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dda0ab04e2ba0fa8f40b2f82ba9779c443b1f435191d835b5aa780d630f42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189658 Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190135 Malicious code in vega-toml-hexo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb24c32e4d09b99287614e8f188638625c244dfd0b4f79bb5170f0788ef9b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189422 Malicious code in seismology-configstore-vuepress-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26424646d56af68a8890c1e7febcf12c53e4f2f2688c342789d899c5cd8b8d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190153 Malicious code in virgo-airbnb-accretion-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a7702c5a721ac4a0963beff2c7e3a9eb72bf450a8c26af1e7bbbb2e5aff543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188353 Malicious code in nova-ini-greatfilter-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ed4677af6ac562f86141705e1fc862963aeae5e02789ae1615b8b8ebbb1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185397 Malicious code in aether-start-lepton-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187870 Malicious code in loopback-remark-cordelia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03050b2cb2866d7de11164971c4591795fadadb14bdf9da6411cc366238b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185865 Malicious code in blueshift-perturbation-centauri-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841e48167a2e8941ea52d3d87bb92b2dec4bd11e24239da9550cc850ff6ac3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187611 Malicious code in jovian-less-loader-draco-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94189a4b8068d471674545d9a9ea66454a1547bf0c8fd73e8f0180d9b2200d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187042 Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f58e44a960c10e222f1a01f7545b9fd1ea02dd1bb91d718b511e3e182eeb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189505 Malicious code in singularitarianism-interferometry-cryovolcano-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a008cdf498b4338faa36f959e2f1eccbd04ff0bb18ac3f35f4dfe01a15e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189046 Malicious code in quick-serialize-small-bash-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83195472b40596bcbf33039302c5a9300ee72e68e9ab21557558e15d8f28a353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185433 Malicious code in alpha-integer-pi-assert-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34951bfb26b2bf73403b5a41d1b38d6088c5a6558b84230cd7bb1e901125fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188008 Malicious code in metalsmith-json-husky-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b97c7a91f7c4306ed3e704e7d987f5ad1bfcf878a6b3f756ab08441f24198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185975 Malicious code in callback-fomalhaut-slidev-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189588 Malicious code in solis-chakra-ui-comet-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c944e50187a88c0aa55f68b8a6f137dc34aa9a7e65fc342d26e2ab27158f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185662 Malicious code in auth0-andromeda-heka-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c39f6cf6525f4014662ebdc8b1f003fa6c12eb9f5603ce6f8bb3d80ff05d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189297 Malicious code in runtime-promise-assert-async-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1992c047a8d0c1a09bf957a23e5dcf557eeb8778a576e311694f9098eac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...