MAL-2025-188744 Malicious code in playwright-quasar-tachyon-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1811086e60f8c2705e4749e9f39094f5019189effbebfe1ef6a7c767217da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188990 Malicious code in pyxis-hercules-scripts-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a81f666995ddc6c6187d95530b91ea605e66fd4709f426879c3d30977691f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189902 Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186845 Malicious code in eslint-plugin-husky-pavo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e746ee6f0fa370fc7f0fb5e7e4e47d2df2a52bc77ffee749e24d95a1f10b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182497 Malicious code in imodiov-omfi-cafacevaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2d72e4c0dab175c13203c5edf523dbc8c2dbb9ffc7a805cafc4163a69a17e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182634 Malicious code in imugiay-ajvog-dnieamnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fa6fe12bf45d08c1a825d80d1c1c4d52076a0f8e8e34d998efaf752555eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184392 Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184352 Malicious code in modiov-kihan-afibanaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9666e7817b22e999c75fd14cee12ff6a6db574b0e461fbce5ae8a2f181a2a817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183151 Malicious code in item-atim-kujaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a515105704b364390c847f65133cacfa3f2bcf38b7bf048deb2b0932d07ad753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182545 Malicious code in imuay-agig-iucaufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4dc75126b92ebe904fc3ed5d44459ea678d0448671578e9b5f54089a4693cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-coc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfhbfdydyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7095bedacfb4d4c300592b3abfc4739809dbec65029a9677efc726cf7932ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-auguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af38931dd6492a7318bc20ac168961864e8ae39dc5bfef3ed86624c7488cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042ef08869bf0357da7e811da4259d6dfd98fd252cd4a4796b452de7a7d47a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgaodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0d175e55aea192ad19b9056b8b8012d132a0f9da3f51007c41e180773ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuvaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45b7d73d3c551bdcf55d053c6b768bbe5afe7b6429c79985ffea31ab632ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...