MAL-2025-187544 Malicious code in iota-scripts-phoebe-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee3686e895ff09efa48a6461e060acddc8e19556f4304ce807a20d372f937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188434 Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52340530e8e3adf5630568ae9cf3e1425639cf4410dbbc5f52ee374a406b15ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-decrypt-tau-big-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849529486d9d0d589a18e25c834f7a59aeec5d0fbfd60317298188a31ea6ec62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyesf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c11038079d21763a6699bf7d374123ba64e2d8e1735ede609f3312f34c323ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182901 Malicious code in itale-adci-gnuygurygjkollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af895f0917a65e0b543a56f492b5cf7f1bd1ebf52d164fe3d364c592b49bb053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182568 Malicious code in imuay-avig-iy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7be7eda584d870fc1132efb3a42a1dac2bd60549d7d7ff84dad113516b8a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172502 Malicious code in namesi-maivla-iubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6595cc2959af7bc6cd4a09a04550faa2d0c670055690ac6bb896e304cffdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb6e9ad3c9993872a1e94a4543d98dfa1c6704583ca4a705ee4b3c5bf73879b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-nddsyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecce57d87cde3754844eeb0b489f83d9f15aea1dbf0ec0ec3e0a4e9fa46fae62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tsu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f62555020dc84bbb796f7da298d7b26a2c6c9fc205a9e1b01e0f09aa965f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36add031fc368606cb4c142de07e69cd2b983e38db3a8b2776b8b2b3e601a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173098b082c05ec1137682e21d9c809846b155be7c1dc01d866c8df32cb690be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157721 Malicious code in kuinsu-lki-kopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a005d0a415b1ebb63c0ef02faaf6f7be5661fca43827df6a0243f778f1f023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166440 Malicious code in sunderlan-udk-vaukuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c6070325c17b104f35ca540ffb2399e2c2e0129f0de85f18671758ea66ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154330 Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158586 Malicious code in lookingan-namakiki72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c3ee70fef5fd9705797b1cac2c00821db0c28661ceb980f70cf398619b0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-cosmos-sync-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-ariel-stream-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35523ae7e04b5f355668214340036ba014f4224743b24d68087288025b843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...