MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148435 Malicious code in sync-transport-resolvers-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ae256d0bc9ee4ca201d3790838fa96e379e70cc3ede5fe9e7ed844a7513d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-commitlint-config-angular-foundation-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e12afc2824b46e6a521eab36252f75aac971211fc61578c98a536968a72429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-css-loader-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a93c6bec6b6bc86ae43ec926c92e2d9fa530b1816ac58f2a4e6aa10ef83170c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138660 Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15533b1e924a939ed90c071fc9359536b686baa216cdbf6f884e7434c1033a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lutis55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37335ad2162615004d4e0bca930338c8afcf1413ef047f0ea51e7a1a474ab913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-getas72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1babcd9ee93bc5a876b99e914fc31b6e7f7d182426bbbb659b7ea0c7173746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tahu39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b6eb46c72a2e2c15f9c1efb9f917a66539c90994c90882ca740986647e0bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mendoan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457f7679e0ff400144d45559e13ac02021506eb4deefc71ee0cee7cc20fd438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e6cb0119f0c6ba462cde7fce66fc0eb94276960ca8aef75b102c39a30aed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138437 Malicious code in zain-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed734935129ec39069ff328f6d77bf854fe56b4922e880f94548d69e8c6c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133642 Malicious code in galih-lutis13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a18e6b34e30a727758dda354bcea95cd153984d1edca4acbb1df6b8298b667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132192 Malicious code in bambang-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec94fc128287d731a44161d7780fa9e46b5b9295f143f8fa95337096904b9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...