MAL-2025-187335 Malicious code in hercules-deimos-superagent-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d98d6bdee6ef3106d12f87df57e1e2b9c3528bfbddfd348a03903227af37f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180005 Malicious code in lookingan-nanakila77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37451bcb180ca87cc171744adcce4bb59aed9e0438ec818701659bbd8a0d3408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-abbbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a7632b6614cd8fd8d3476c84dcf070da6af68fee1105bcf24b71c2ab8f3adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153423 Malicious code in avminh-afi-famauoog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b00d52dd00e09ba244b75e5af185f37ca1e86c158ae3aa4e0535edcd5c66a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120727 Malicious code in indah-bakso82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121f79bca676862cb77438a2ec56a92dd5dd67b55716855b1c84f24b23f7cae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84007 Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...