MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187673 Malicious code in kaus-antares-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae86e3561dc9f38756cb2bfff0accf7d215afbb11969a94ba45bf705675a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186185 Malicious code in cluster-simple-encrypt-cloud-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb15dcdb1ce2a9e8a213a04162dce769a621eea2c8ab50cb889873afd9eab5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189524 Malicious code in sirius-spectron-webdriver-mutation-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e68fd5f36e91ed5d055cf305c8aaa3cbad0639e36219d2bc00df0237ff9c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186115 Malicious code in changelog-prompts-europa-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d38799b702fcf2aa71251a53635f3352bc26fc8c894932530f350b66a69b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190361 Malicious code in xanthus-zenobia-entanglement-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c87e30b2ade435267565d6e87f20d6053104a597bf4718d9287de3299be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189366 Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187287 Malicious code in hash-warn-async-private-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baa53a4b1e0c49f2ee2d73a713c415b7522fc3c3feea203805ffbe276f476a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189637 Malicious code in sqlite-winston-scripts-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cff5f26dee0c022bd5ce46d719a6d2583faae3414309a1c04c5ff377c8dea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185772 Malicious code in bellatrix-prompts-webpack-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff60d248263ba8c994d0355354d6ac79aeda3be055d3bc9944a338d1820a86fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189324 Malicious code in sagitta-tachyon-rocket-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105f7a55705922e8228e6ee258afe22d3eafa3dd23c68fa837dfbbac199b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187635 Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185839 Malicious code in biotechnology-enceladus-jovian-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3c36919a7001f229303c0e8f4408d4ac99f412e66f6940bfdac27e941ef40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188298 Malicious code in nightwatch-supervisor-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1acf8297e72612fc42318e4bffb75532887d407ff062d75774073fb6cea9677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188319 Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760a0317286196c791ed9fd5a105054c79342763e4acf1b914847ae4895dfc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189470 Malicious code in shell-integer-optimize-log-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c1a43e5ae21f36403f8a689d673dbee083c6f11ecc57ca2355613d69ecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190444 Malicious code in zenith-algol-nodejs-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8969814a3881645f0614d171a6b2fd22cdba8d525d39f3294b68a498f406e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187371 Malicious code in hot-thread-cold-fast-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c05ed2faa72ffc66743755809b61ae158c8a76189298f711ee7005be644c7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189895 Malicious code in testcafe-janus-sqlite-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7feb0b7445736f55bca854917d47ab99d715f6cae4ee3c643c4998ca93721c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...