MAL-2025-189363 Malicious code in saturnology-fomalhaut-geckodriver-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2caba52a6e0c88328d81e8c122e414d91225f1c1fc9d17f8a5aed4ff943da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190411 Malicious code in xo-phylogenetics-kastra-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776f14ccb8c890a6430c25774d01ecc7a4242eb45e1aa8e6b3770b0f3a7f088a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hawkingradiation-jupiter-toml-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f597817c5057b6028054d85338a68c535363cae5c2a33fa92fb3c5295d345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181722 Malicious code in astam-ifut-dinugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be619c47b9f41fb4c0bb2cc9333a144554133c5219baddd78dd4f1c38e01d0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182927 Malicious code in itale-adci-hykaulaygkusytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c1da70a7c98da5c8ca4b711a3fe5dd0bfe59d01f78e714d00108ce8debb944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760fc35764b8672f159948588133673e83cadc18879c568c392864d3b7e9199c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1c5bc702395ec24ff4ad153d50d7eff0bd6c80066825304f0cedf0ba9c51d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5b8677ec92e1e06f5a65c197cb8b3ae18a2408bab58b41366ba1203dc19974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179514 Malicious code in anais-papimoa-yama0ipaiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02228bc0101740475c148641b37991ac8a2c0240cec660e2932661d6f0d95e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61db39546d507c6a372246541382a1f870ad0860f4fe439a4822a65f46443934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173360 Malicious code in buta-fana-sadofagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527ac0cb63400fcab46d9c66d36a0d90f1ffd7d9ed1e519d7ebde78521a7bc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174774 Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173748 Malicious code in butry-mutry-ipsumt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de794db3683a2ca56d036a5d2a2d4cd264f066ffe7dc0c049b40bfe844537c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9695a9bfb1b43d0d4aa875be6e81d445b1f25c3c2b436d1109b54fda1198bc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171013 Malicious code in celestialseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6577c6a31e6cd313d492090ba42a86133ee83185fa0b47721c07498811389e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c61ecc41ce209f6f2be2e0780498ff360ac97408fc1c374f2d48ec0c3da2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160427 Malicious code in milisa-amisfaodp-muiokfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f8a66f1290d27ea18217934bdb28d7c21aed803e584a33f5bb04d4c1a86344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156379 Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157958 Malicious code in lala-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1453947061a2686f7e5f5708c644480e2c4a0144657138755f7792e11589e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...