Malicious code in webdriver-manager-venus-coronalmassejection-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a9f79b52091ebff932b871168c288a94bf9d5c3465addfc54adbcb69c3ca52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187211 Malicious code in graviton-hapi-less-loader-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-balgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908b909e038b349bbd3797b4f2e0a321baf4c48023f31c4eea5e5bb9a10d8a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofaggdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cecc3e9fcaa90a05d53987203d823501e3229a2e7de38b460a01cd561f8040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173403 Malicious code in buta-fbobna-gdif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a0a1941496aa5268f1494196ced02b010d4149538c9b3dea77241bcfb4ccdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf9286f323b70b65e35f6cb259c9c8b533f0a52dc25ce4253fbe5edb2552578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-gaoposaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20784015787c2ac5e83eabdc870a171609ad9aae651506fd1c4f27ec4d372898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24860de24d55109468d34c45b703f2b68752934caacb902a64fd95d284e5d460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168765 Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158046 Malicious code in layla-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3905f5b551a0eec6b63052a66f7c02bf479f68d060ac4e7520e13756d0ad9426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moiule-aro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cafc1fa8fec95e3a46158913e70cc1273cc0139f1ffc01e216c780fb5966f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156810 Malicious code in iomodra-fuoa-jafuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b840d854cef0e33c233b6fa06fbabe657fd7ff52d7b2517efc6453469bef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7c0751410ccf393639a0a2fc04e6b4c5e410c53f0beb573e4d8c90a0ada37a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147320 Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-xanthus-websockets-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ed8c68cd57c4176e6cba9e6be48d70bab1314adc77f213fccc63db194af483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kentang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c90b55a00528db4bd8ffb553b6ed80ea8ce1ae07a9cea19cda5f3621eef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...