MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186705 Malicious code in electron-superflare-quantumfoam-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c7efe4a221072863a6817bd5ec47504ebd2412d7bf3a9901ecfca0fd8f7cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187570 Malicious code in janus-enceladus-supernova-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d9eacb602968519228c53fe632ffea01a20848339c1332b7c1701c9be4f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186949 Malicious code in fermion-geochronology-quito-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a2f7cc81ec51b781fdd5edf0b82a3ff487dfdb67166aaac920eefd31e6d59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188500 Malicious code in paleobotany-janus-writable-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d24d77fbf63477dd28b1fee9f1049b7e8f13f0ae9aee555c30c1ee45e367e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186572 Malicious code in development-antares-xerxes-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4362fc9df795b9d7cd12a02041fd8a23c9956574057cd907b59e60ecca9a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187832 Malicious code in load-wind-root-balance-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca2fb4e13ccee0f8eb6b4e06c1a39f11790a077881b18b085022f14fbcb9456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190056 Malicious code in unix-earth-zero-decrypt-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f65dbb8a50faf4807c98c86ddea4df1e228f34b5b687aacbe3f6286776b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187850 Malicious code in loglevel-hyperion-bootstrap-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3637624f4dc1c51c25b26e76227b5d808fd156ab28fec3f880fab3b549f18a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188820 Malicious code in primatology-paleoecology-archaeoastronomy-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160b83698081432c0fba5307de34e54743327d72800338eef264f6d008348853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188847 Malicious code in procyon-planckscale-steganography-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4d37fbf13255886e12089e56f22b61d91b3bdf0777757e8525a23c2d66b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189729 Malicious code in sudo-reject-mu-proxy-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71bd21ebc82601b1500c1ec0b38beaf261822f483579359312b433a31d3a139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188237 Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ce8afc89dbb4d9b8803c81b1f7a4c931f3edf36f43e471ae33f472e8148e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188801 Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e02a281f78f15c659fc2bc0017a1f4fc72c6e3519a06df0c8b38338db6ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190469 Malicious code in zephyr-prettier-sequelize-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f33cc7656a725e03d077a064f3e7e9e32e71a10d7fff8cb27b483865200522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187992 Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190444 Malicious code in zenith-algol-nodejs-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8969814a3881645f0614d171a6b2fd22cdba8d525d39f3294b68a498f406e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188196 Malicious code in nebula-await-paleoecology-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b549d90567ac211cc5c3b056b1542850ce033df28ab52a5e0600e273d3a9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...