MAL-2025-187561 Malicious code in jabbah-colors-parsec-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb186f675de9916b8f536619d22cc0e24c1fc3e1dfb322b2bd221b7054c1bb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186324 Malicious code in corvus-javascript-charon-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3ec6da952c946bcdb511cd68067f74a208ceba883ec29ce8802e9ca8e1554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189883 Malicious code in test-janus-eslint-config-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79023492b97711616187adb7b16741d7d4baf291a1de140a8c20060aa9f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188407 Malicious code in old-import-decode-table-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3318615e0691a5ff419704ab106e4bb388891cfde25ae060e932dbbe49b4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187979 Malicious code in mensa-fornax-chariklo-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bea88bb2438959eb72a95c8ba6f1c94ccc913f35cdb84ec7d3884727d656df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190307 Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10d243add4dcc6bc246152c76b5cf2eab5692efb2dce0904e83bf7400760b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185844 Malicious code in blackhole-prettier-plugin-markdown-achernar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb53a6893f547e5d2b550067d21c5dd4f44f24103e7ccc2d9d6da09bbda4292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189095 Malicious code in readable-enif-module-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5279ac86f66ab8845298dfe697a8693a0861f49af12492693f8f39123fcde609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9813b9e5e39ab0726638a598fc5e2738e707b457adc23b546905f8ceedbc3ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaadio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11955a8b6c1f2286d81b7eaac997b5c42e036454186a26276aa89fdb901b5fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e7719553c5cf6f0341c98c3fd8a57ae4c03ddb17312f63a6437a776035951c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc6e2ad948665d1cb006fbf4ae6b4793637657f65325bd937583bd9b47dd5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b69c3dcc16fdf9ee876642a7dde0e74d202652e098c76bf7f4712eb37dd502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b957bb54e50e683488f27387e494f4373f6997ef33f42c5a2164012b3d2ce19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182786 Malicious code in indexa-fotadio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae94c599719c0839f9b96f0eb1d17e900c3c0024ed0a8010e1789629fb5a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184992 Malicious code in sonic-kig-tifuacfivacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68056fa37a0f0e9ad0c75ac017076cd480c7e4d3bc7a35b2b2a3ff22785acb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184594 Malicious code in odasv-kiuu-bofafni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f0b7466dcc79b06f8df59c8efd66a112372ebbc034e0507cb5feb69dcbf40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyyka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73525a6c2609d60e92e585449afe4f2f3ef6aea8ea935d2fd8e4b82e596ad4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...