MAL-2025-188190 Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8722c814d02682ad652c04b378d4dc3c4eb3d425cc1f427ccd04011bbea9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185713 Malicious code in axios-envconfig-antimatter-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e13721c20695ceedd4b482837dbb84cd436a7acde3112801215ee490c3c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sun-good-optimize-big-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404e006eb03ec8cfaca6aa369af6610f8b08252f71d38cab7166cae41a91fad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184580 Malicious code in odasv-kinu-bobacuon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95de16ce4aa95ba461c2d8ffbcad7e307b443730c4a424c44bfb182a696bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87745aaac0357ce2091df305d10cd849015782459c4c10a20face3f7bf597d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178248 Malicious code in rindaman-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fcd6ce49bf87c91c53dad962d2c987f9120789fa1f3c02be63fba333ed3a1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taufiqcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fd91ef4d7b131ff084eab6f31dd2d79933f8331229ea8a2699f7fe3e815b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd41b37d3ccef7bdc50930ce2567bf189faa8405c0e61e6850a132435e10781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aim-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddf020e13cd5d173a1086c6d76cc269e01e0012b14c62daa1d28ebc9c62e005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviaah-afgaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453f77ca7ac6732aeb1c2215e1204a31de4db46b4b398faa1a8fd3244b0b0137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-cdszire-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e9107087096b9b17caa541ac1315f55e1e70ff87afb58cc8a846128a14fd87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159718 Malicious code in mans-nursedse-manta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7200682988c17850f5b9ed99197bafa5a713b797aa53ed0b249b1890e5801fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166054 Malicious code in slamet-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7b4f38bd0766d0cd4beb273bb401c1d62ff9a63d6f4448163b189576ae71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c712dd1da353e69dc6ec3f5e2a73cff4f5fd119a933fde692e86e1acf84364a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170590 Malicious code in yuda-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e26aabb3e3087ae5a34ef6ffd05e4026dc57877acb000abc94f3f966cc077da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163193 Malicious code in nokire-nana4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0500360ed83a7da824b2a4a9df6d545898a732db90729693611beb29acf041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168671 Malicious code in tealove-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02821f2b103d633dc71f990fee6db5a13b0ff00975936e1675f75a4e5ed88914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf5508da59292551a646461a2c700724173cef6a02ef4c7244e7023a0def0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0675635ec1983e3fe928e9b65d211e3e9e7a83c6ea5829304060b03512559ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...