MAL-2025-141800 Malicious code in draco-webdriver-mocha-writable-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf08bd702ccdecb6c73e7bc793acf780d29e42da42024efd78d93c91d3601cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-naget62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e57180cb3630541f2154ff317d6305f72b8581782bc40ecb4b9013bfca1f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137669 Malicious code in utomo-sate14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296d3abe23b84ceb16ffb53d51dc468b3225007be756ee467e492a0041e2b88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e09946ac9525d83d7de8c95acc404ad49406fab98fd1c84f2732f3849c4a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sasag85-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52faa2baa11fecc0840521d287c09556631bf77ef1560596843c0db8aee4fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d01622d9ee5ea7b87939941192a68b516210566f59a4dff0d42e018de7bbfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129383 Malicious code in political_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e99b55f7e3eb61f837d0497365d633323f4f5b49d57acc7cc09558a5d8e72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85452abd7dae2a41f50362f638f1c66aa5fae44c704824daf796d175b6eff5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120802 Malicious code in inland_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff250b510a9fcf0721b03b3e46f82b627831b54e4efdbbaa80efc18c3273860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117511 Malicious code in tomi-soto64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3e0869ccd31705d6d6e0157c1d63ca06e7410ba64ada1743094804f34d519c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104155 Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0c8d0bd127e55fc782e4b121cc1cb5b6becdbc6d005fb75fdd0d0a92ac97f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b35d9a597ef6e19ae609f0b1284c73e764e97a38a06fab3d099a19fc2ab726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rangi82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55319ab2368fadac5c84a6c236343b677356498d2922c18536d9188d8fad25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97510 Malicious code in youthful_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c88bca79cfaa63c26c2d98bcf0b13254f7f17cf35c1892d8c165a7bf17e430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a8d38f43b5ee2dc8a5407e279b57806384580a7207e001870b4e448504fdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89158 Malicious code in okta-gulai74-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb71019b3c906b67a37e5be58f48d9d0e14e65761202a58ff98c3d1036508e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sego43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45863bca4a42d365e57d685f2079ba22865aa33677ee79f3b3969b10e4736e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e405611b9721cd7c55846143f0787b32f1198fb2182dfe91dc68fced82b3aa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-gudeg89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a48ca81c35aa93b8a521647f03d8a00a6e6be09aeb74cbba0f8d25a3fb36d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...