MAL-2025-186300 Malicious code in convict-thuban-blackhole-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb6a9fa5d9acaa434dc2364eaaa6b7354739a09a6861905104ab7931ed2f0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e905ee031b2c4ef7912618f1d64a99f35e6da479055f1504c5b29a0adaac500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-superagent-spinner-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d406ed50d97258b1c60ee835ae0350d359b3f8576bc1a5411d4da722d37cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188356 Malicious code in nova-quantum-protractor-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b35d5356afc081638f9e5562655901df31ef1d90eb6c13779454805d9ab8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185555 Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asitam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758e831fc8d54957a107d71b57d6b783bdf404dc9e23b490504dc63550302ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c1da70a7c98da5c8ca4b711a3fe5dd0bfe59d01f78e714d00108ce8debb944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaiafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816474611ba66aa7444be626a4a0d5a9ab9794657633ad6feeb3f5895a2b61d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179462 Malicious code in anabuy-innu-nini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c938ae0c5964f2037d31f0a873ed3fe3993da2e09f2ab105158696b0df715f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177559 Malicious code in polymer-aavof-adaadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3adfbd33289d7f3cb606aa7f75f48faf242bb49f32671ef0ff35cd5329e774c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fb9724a20684400889fac315135a42a5ef7de3601690dfb40ca145ac506d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178434 Malicious code in sahu-satg-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01224352447108c281ef4bb0abd8f12effad8bb2e1a3f78c3503ffb34115d05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172776 Malicious code in alvino-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0970108848ea51e7b471db609bf4b255a88d28477a45173731b2cd86ee7f1de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176491 Malicious code in nokire-nakaocil7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd51f6763a93a3b0f5141db9c173524daba83be5f729f41f5a98c6d0ebda20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176751 Malicious code in nuilva-dadre-ahka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a39fd2cccfdb86eeafd53742cbc6f68cf1c1973d9dfb4b8100540efe905f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shakirameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322973db53fff10db4729c9e0660cefeac366fdc680be1ea22ca29a3ce1be30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solarsage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e5b00e2438b359b11b8e3bc6f47b267c8f36caa6c46c1ea58e53934d714305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalali-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba5c7b3b420f1ccc59aa638739f528edef0c672d95466aad711fd60c1cef6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-maolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cfdcf041b4605fb573a60a1d8ed451844f603157d869affc597ab4771dd0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...