MAL-2025-189603 Malicious code in spectron-chromedriver-thermosphere-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15b55ba7e54630255482e6868b8f640f70daca32947947e5ea8822a50d97d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186138 Malicious code in chi-omega-permission-analyze-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a333a6ba154a9285b807d782dbb2c72106fe930ef975007fb54ac5d2a6d251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185528 Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187818 Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7fde528fcb735413f5b059ae0d9ccce85ff5d01e66637d1759cb7a0dfd4869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187391 Malicious code in husky-bulma-nebula-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029de86705f76c06a577e00966fac5cdab3d36021be7d50cec1844bd03f7b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188995 Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88f3f76a14f5bc81391f34d6452a089594d0603cf85c69cdd178397bc3c36c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187095 Malicious code in gammarayburst-neptunology-helios-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1639aed73bc43db96f2914d88cdd73979fcf54d713614aede5317f2945f3d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189055 Malicious code in radiant-express-sync-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186790 Malicious code in epsilon-class-cluster-root-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803cee7f39b9a2ab6058d1cd3ae867eab62842ca33d4e97cb5e92576816dc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f7669b1c80b52101cc2ce59d5e9d6e7dda9bde619e2530bbabad3af9280072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfuguivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a932254107c484cd10ba65cf8d7f8f148261756cba8106444f7e3d5a7918b2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d4423450d9581599e3d302c80b2e9fb1dfd097fbd62dcdfe93d0bc52a47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8424175efbdbd473976c2f8d40e3eef19e45e1cc6fb0dba339e86dcdc3bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84cfd6846385891cbd3e889dd7bcf0d6afc6ca6a0246474d78821909c39a233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdcc3aa397b763ffe7b5608824546163ab036cfa64d4bb688b53777f8bc2522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b065cec2a5b1113e9792ae85cb0380920eb18f8fab57ba6aecd45c20312d200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-inafuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1d6c3e20c0554d4e0e6c7ee9c07c825c32d5f72ca0d40cc27b585ed82fd2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6158505cc6bf6fdb67694f822d74ae234619a285cb80036746020314580eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...