Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171631 Malicious code in nasirqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485b8466baacf5f808a74021df6792658a5c0e536ed3f28fe571816771a6f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150055 Malicious code in @mipta1/ijahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1e40db3fd81f97d45845e5ce4c845ac909d16fab9405bdb6244f5b0c7a8833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158346 Malicious code in lookingan-konami81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36129a4362f716737e5fbe02c3673096289c257168fd4aa24c05bd8baf743d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118746 Malicious code in appalling_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1893af02c92c630f13e4cfcc86d311e48d62ef841f074deb57c30ef7c863f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106714 Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-tahu76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970c082fa6d01348d26db594285719f9d86fac85c67b8d1d4b367f10aadb3e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad842ebb3fc7d678631d2a6e474070faf44e64828321f29659cf571412b7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jamblang33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3872ebf5ed10cc9732290e8eccf2d7a423a5278cda2e336bacdad17f48745 The package bella-jamblang33-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...