MAL-2025-190265 Malicious code in webdriver-manager-sociobiology-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48d3c0fd20375f6fc9ae730c7410d98f76bba902c31d24ab749f3bd628ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185388 Malicious code in adonis-tectonophysics-tectonic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5057ea202561573b6290c79b0741086268a54ece3f76e1906e5ede4e3511d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187599 Malicious code in javascript-magnetar-epimetheus-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd836a25d5aa73f526777d2c602b2a919e137b30c1167b63e65262a3eece2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186482 Malicious code in darkenergy-palynology-publish-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c5069eda2268716a6bd3f21b04e0176efd902552c133cb959b836a92adc3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188929 Malicious code in proxy-rain-decode-xi-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004b97a2bfef2272a65920db91bb9ccb657976da59d63e4a71c0f18ea642a87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189825 Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186180 Malicious code in cluster-decompress-double-encode-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10963e1b5a699315201d9cc43a9f176273375135c17ca2a87f1f06dd03cd0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e92b934eb64c290922be554dbe6bad2d27b149bf93cfa109ce32d1a2709cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e72723fd60f6fe8c9b657414bb697e95f4c8bb06fc64acde808f82e1462272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ee287d0f854e2ed88e4f1621d54fd69c0acb10cd279a46e3bf7b5f520b5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7375f28280c3a410f3c2d34c0b2168cad64ad2f2a066bfef405f7fb71f650e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5a7d394174345daac9ba53c7ca8ac328935889698ca5cc0084e8fe4f226352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5914699eeaeebe8aa196c1e3ea3330b560669100eb5e2bb8a19a11410a6e2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-anami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc86d8fbcd6b6ad9c894abfa5c9a4b2bdaaf1a2d6053fb18fbe6db10dc326bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolidnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ee5b11de6c2e5e583936de3d53e528f760c8eba052953b3ef1bf9f6632cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-ibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8886969fc314844b26c10a28cae35540dc9a0ebc37a51f19fb19e584cd33ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0e03258cc3ff220b58f7f9ed8db43fbacbf403979fa6cde1e1138d50ffcb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamtag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d70c7aaf36a15d61b8257f885d28f4c69113fd67fe51d487b5291d4227ffe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idlisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddffe8a09899201dad1445250f5ce219c09c9b0576f3a245c697e122832bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...