MAL-2025-186151 Malicious code in chromedriver-non-blocking-chariklo-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e3235429342473e1c54ce4bcd3e40bad9b9b47232d9bf913d071fe49eddd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186304 Malicious code in cordelia-babel-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991867c5b89cb50239cb4c2cf768a904fa2112cce0f729488b115918476c467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188698 Malicious code in pi-validate-water-test-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecddad273b22a7a6a747b0fe0d76b37f55ab197c1c73ad7f8f48726d7bb7c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189535 Malicious code in slidev-levels-install-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab6a6244fda69cb617aec284412593aaf95900f028ed41c9805a71c843f185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188880 Malicious code in prosthetics-local-canopus-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efdeea658b4d30cc033636cd337b88a3295df0119643f737b4b8fed468c07b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189514 Malicious code in sirius-darkenergy-selenium-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8a88c1473d6d62a4e97fff41207584a1a760e37bfae59d36105075e63250f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189195 Malicious code in resolvers-chakra-ui-bootstrap-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d79ea6a0ddcc32a8eefe901fe9fac78119e8f7ef1b653b5f8b55b441099df42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185396 Malicious code in aether-radiometric-sedna-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7134d489c8a851a58b9529605d85a949d662e70a8a5b193333fd2b342b9db97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185353 Malicious code in abiogenesis-airbnb-supernova-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b35d79dea66f1fdc77e0451d307bacb1912c7849f9e4094598cb136d4337f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186985 Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187296 Malicious code in hawkingradiation-ora-celeste-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16583bc4d19d123f6a7f3df0faf7b443656d981c65e219ef3ab7b8d15897c9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187307 Malicious code in heka-neptune-nightwatch-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84dc40b71697f2fdd325952b027c262ffc610bc4981dd870c48b15e3491471e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190018 Malicious code in typeorm-postcss-process-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294fc466452d2820a486df7e32926bbee267587784977a5dcfde6218f0c0289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190229 Malicious code in wasat-bioinformatics-leda-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192934a7bd925fa500567877d6a6fd5bd374d487883343d85cf3d39fcca490a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185934 Malicious code in bulma-promise-redgiant-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea908eb89c40ecb98f25cb7fbe7bdb9575dbd9175140d9fba6315a9ce87d4814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186650 Malicious code in duplex-tailwindcss-nestjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb446b2c191323971e7ba7bde19ddb20f59f29b7a2b7e053f8d6473d29796b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188343 Malicious code in norma-sagitta-bellatrix-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a517b27fdb18f2f93c4d6ccbb461ffbef3fc61fe0214cd6f5e371ec604139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188757 Malicious code in pm2-dorado-lithosphere-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0bf0122bf53ffd695ca74ef50913f10924601962d70f7e2efee47d07ce23d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186755 Malicious code in enif-zooarchaeology-jovian-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bfde11491b202a9ef0e7d59f6c037b33c4a718db17f3028ae3c1c5a5ed5e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187565 Malicious code in janus-aldebaran-middleware-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6998a4747c3574968be2d1944b519bcfeee302db9a1947998792ab15a7904e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...