MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149789 Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142385 Malicious code in express-mira-miranda-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae3b2a2d7def80718c44f599b95940a36f80043b02149736f2a0a1fad477fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147131 Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138660 Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15533b1e924a939ed90c071fc9359536b686baa216cdbf6f884e7434c1033a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-getas72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1babcd9ee93bc5a876b99e914fc31b6e7f7d182426bbbb659b7ea0c7173746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tahu39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b6eb46c72a2e2c15f9c1efb9f917a66539c90994c90882ca740986647e0bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mendoan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457f7679e0ff400144d45559e13ac02021506eb4deefc71ee0cee7cc20fd438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e6cb0119f0c6ba462cde7fce66fc0eb94276960ca8aef75b102c39a30aed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137723 Malicious code in vera-ragi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed6d27f0b6a4a7594a384c567afef9ee96a0a5dd3808ea948a139cf90d13c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136535 Malicious code in real_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec53769581afeb00c0dd1bc791abe47c3f0b0ec6473c59b3f8121a0ba47239f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138437 Malicious code in zain-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed734935129ec39069ff328f6d77bf854fe56b4922e880f94548d69e8c6c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132077 Malicious code in arif-bakwan35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2d55fa3e5764db35c58e3ff620b77b17563923691ff86f55efd27ad16d13ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...