MAL-2025-146327 Malicious code in polaris-cache-geckodriver-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ab00d34a04706b54bcda4db023930a7bf21b66b64905d2c0521e3e5ea5771f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-semur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f396849dff0d41c94e744d85b846788a128942e80ee2b7a41936c9d9aa106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lapis8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32c90eb67c60dd1be3ee0e83b19fe88e94df32b3883da67c67daea8f23e444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b039b6ff80dd37d37bc6ed5dfa3812beb33b1704568aa7b3e40db8c336c8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cbfc51ce5eded70bdf564e056701ffddc24358123f0a2814fddc1d42e57b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a383f691bf39d8095df1984b160a42950d168c4231b8a2bffb70045c246856d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gado-gado22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792da712d1e80c8b4a305ce1d995f82b2cd66c8bd5e0e8c8fe30bb1d5aac1a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rawon38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669bd0e4ebb09fac0ebe294c321c626fb0401fdd8399f616148b00314fe0f3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kacang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0529918a4c21e8bf9afa37660fe872abad49f68eaa175ac6f665211e8cab9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasiuduk79-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075bf8e6dc5c07713877f59c4a8d96c437a557e6115b52549b41cbcadc70fcb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f80b88ca9a23450db6a3c4e5596c3ef98c59d4d573a3624adbbefff94cceee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sambel88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e3b85e7b1857269be7502086785fb414636038befc0ab247d9b6e19e4d95e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-getuk38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c9742373cbfbce33c25aac7ab216a2e98f07cf1a3f04e41f753256634fcdcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd11f1a2c36472de68d5c50035e5cba3d001932f8a30974614997dfc3b526ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ketan12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d6655e5fc06de1f8fbc9131dba08622458fc0a029c45c01d488662c910b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...