MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ichnology-archaeogenetics-repository-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d427b21d1e1c3f178b62ed1bf3f46c5e28790ff762162804d7d4a5e0be1a2757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-vuepress-sails-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188383 Malicious code in object-authorize-array-cluster-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34246e08ce2b9bcabd787f7abb0f7a897edd5a188bd93a724061606b70cee008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f27a7a44550230ee77e6620ba736fbac13c79a343f8c60277182dd020aa7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184732 Malicious code in oloc-yg-uhitaggadtusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1b2bdb9819a6b1f4520dfd42ea8333c774eeaa903f2a6c861f3d08c4f5f304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183227 Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184975 Malicious code in sonic-kg-tifuacffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed88920420a3610cb980be501d90deb726b03c8e29bdedab64a062ea3adc7d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdad8be8884202dbffa1a53b878be473531d6178a4ea8cee608e9731596dcbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibvafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9740c35db041af198861d1cf0d5ece11355782b107592e0b410f2e7311bdedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moveda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775f95f498a5c29888ec3ae0a93073a516c1768a321edb60aa8a306ff9aa9772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5308483778ceb44dac8400be455f0bb940251f5b0b5ad8a2282f401f86c0c53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182102 Malicious code in gocay-guga-vivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ea120fa46b65790f471fa3f1560ec34a5c9506ede7e7969931bd1474efdf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183378 Malicious code in lobac-ub-badadudcafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ccab430dd32141b2ebd99d9b7fc655e24b0ae51e5dceb402eaf224025a09dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d98b9fbd72407d15b9f8e8b489150dcb48696ac9494d0859a00cde525033dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184794 Malicious code in poliaoz-aiko-avuhuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a11bd93f13433477226e847092a7a720e6f4fd1d20f8143f8826e2f9cfcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183205 Malicious code in kisut-dfg-diwfzcfecdavcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c107391f4fae6eac63952ab8b98da103b0fd585a6f0133161eb36b0f8d4b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182753 Malicious code in inda-foji-gisagun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c55405319a243dadeb48c0ddf5858756cc0eebb7df3600c25c86b98c781e755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...