MAL-2025-186684 Malicious code in eigenstate-auriga-module-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939bce452be9f38f47bf7adba1f04636244fa890ff50cdd36a91f3c3e80598d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tachyon-vortex-bellatrix-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5822972fbd20e17b527df3dc5f1fc0d18bc0328f474e68ac68715f30e9fca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ursa-yonder-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8934f9f8a84c3ea9257ecf86439131845b5e98b2fb112a7de097e28279bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189163 Malicious code in release-it-indus-promise-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26390b2e466ad38565abbe4463e6ef01196106534541f9ba58e2d1c0c397248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190428 Malicious code in yaml-notify-authorize-code-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a748c3c4c6a4f455fa26d8f4b30766e633d2091829606b8fe5c328df246bca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186740 Malicious code in encode-rain-refactor-execute-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ee24f91b8cf6e03f7269a7f2c713ec12a15e887c78c0ea82e730ed28149481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189247 Malicious code in rimraf-playwright-morgan-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605f4589e9fb73840fa4862f5d97c83687042c57fc5d073de4da60df0027fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185794 Malicious code in betelgeuse-metalsmith-frontend-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790dcd2ceb700af788d0557c09c4d92c94916ec90b672e724cb3fcd64cdc8338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187445 Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187403 Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aa39d2cf73e1508204d2e22e08291cfcfeb4fdecb5a627d7b869aca7ae494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geomorphology-materialize-perturbation-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d80fddbff7c9f345af602935a4448041c71c6e3aa0a96f263a4b8a2207f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiohah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcc855c1b38e00f3e010eefb2f3301a87849b41093b520eebf49435284f864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c408080cea73fda8116bf0115e6b3c5e4b19384e51c4a86f6f0cc364e605d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaubfolfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002f893549d8e85f2f444ee9443992fc094ff4543de958e72183b419a170cfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503e18d6cc0d9eb3fdef9ff461cad20fedcb0ba5e7b8471be3a214407e1eb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183131 Malicious code in item-atim-kubusisaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b8195ab43af99c61517c2ab74601569401b97e453ea557aec190f34a7729c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184996 Malicious code in sonic-kig-tifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b982166687ee0e5f958542f7adf33a2df035c2ada89095e87fad89159827a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182568 Malicious code in imuay-avig-iy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7be7eda584d870fc1132efb3a42a1dac2bd60549d7d7ff84dad113516b8a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...