MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-blitz-jwt-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad40f6b4c653a8d4b76f65b28575d51152312e7a0a56ca06c6229c9f07afcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148610 Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139711 Malicious code in aurora-sails-orbit-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec13aca688ab1c0cd0d3904d54b99efe70975f07a3ed1a3628f53017e57239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147429 Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144990 Malicious code in mini-css-extract-plugin-proxima-forever-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb980ed42d4d4218e2eb35162ae3361262e60abcf57f5e770ace6c3a0f9479e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be0e3ec7057c419fc988228c37c8c6f4ba30cc1424340a6e9bc202188e66015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134560 Malicious code in jaja-oblok20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953b8dacaf32e2cd510ea44be2e839cf47a798d3c9c5cef9ee6ffbcedbbe3866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2ef827607dccbc95973e69f943ab79c96f9d67ef4ff0de6bab22af7f6d336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134818 Malicious code in kiki-nasi55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae07c76572bc57f9b6160d742e3709e70132fced75e150993281a6b2c4c312b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9282bbd5afd6701b7c176ce8633ff3dac5892ff1c2cc520628a09bbe8048c67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132218 Malicious code in bayu-mie29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6055a80eb93802bd3c8e1572991bb9e9e15c445ef2740322f740c4cf1b4e3d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130175 Malicious code in sinta-oblok88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29442b28315411659def6d9824823379881cb491a13e34a185edcb828bb1fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126776 Malicious code in gilang-rujak13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d3b9cd45bc5d074cb0233ede6886c78ae6debc592cc7b8112341c55406e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-keripik88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace50fe39e782666808954d09eec65a6d467ca01006302eea78bc84e86c6e3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mieaceh54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c94e15040a1e652f0e048adb5e8f7547d55d83786953fc86ee1744138a0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127143 Malicious code in happy_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48f9c8e3ebc3639cf0cc7510d6242d23339e6b779a00721ba966c6022eeee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125238 Malicious code in budi-getas46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c4b2dd04350cb2b4b902800e6bed530dcd52076774951352dec3e91c245669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128624 Malicious code in maya-wajit47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462b428692af7df8cc575a10756146c721d846b9f7d03a1703abc1956cb5924a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...