MAL-2025-186530 Malicious code in delphinus-tool-sync-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309471f78b1f61e3fba41e092a36d4ae761dc2439a6686d82cea711c93a982ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187772 Malicious code in library-archaeoastronomy-winston-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe3dcb39beccc420438542d11282f21171bd86c34f18ac5d213fcc6caa0eed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190333 Malicious code in winston-jwt-vuepress-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e66da85f83a6c52707fb31a1471422b7c312dfaaa2f7333a8af1e1fdcad5471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187280 Malicious code in hapi-zenobia-superagent-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13954284061f6dff2946a7a8ea7e292f2e0a5c843b31c80ea8709b8cb7d11028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190231 Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebfd3a537468dba057e040fe1e211e8bf0580033d12436164ebfafd5c30b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186635 Malicious code in double-rain-protected-import-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8581e04e65ec57750c45a77518bc0bde32027cce7cec3092673048972abc390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189982 Malicious code in transport-babel-dagda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1c06bb58ec7b568f529051bd863c23ffa6e9ca7544112284c9f889effd370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in load-fire-balance-try-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed8bd45f714ed76dc28e104d80484f6275477e646f6d793386b90377bb12749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186468 Malicious code in dagda-event-despina-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4af1dba9edd14b6b9639544b279b4ddc5e819a325e046b9aeb564916b7e249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190372 Malicious code in xenon-graviton-gravity-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5cd3c1a720ee5addd563d7161ef6e801e83409e8f804fd7355ef0ddb38c2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187851 Malicious code in loglevel-meteor-mui-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca35c471536de6395cd1a455a18886f5a26d7919adfe6f44006c4879d894dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186985 Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186502 Malicious code in decoherence-fetch-wezen-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b0435545152b75f4c01e16249ba939d98661962b8cb6230d3971ee63181e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189051 Malicious code in quito-process-oscillation-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305c655f081481854c69983ebaf4ee99e9246b7a2426a3c8e2665cdabb76619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187723 Malicious code in lambda-byte-sigma-static-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e512f773e77c8591c7fdc12e28652a7c98180e468e2eaac0b828ba21c83918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189488 Malicious code in sigma-file-signal-log-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56f9455f2e267b6923668bc3fcc20ae59667c62ffee139e2dfe75c84d11eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190426 Malicious code in yaml-iota-jasmine-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8425bb6b7f07910bd25a68dfefcdb32430f54afe0d64a10bd237cf2ec705796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189686 Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...