MAL-2025-189972 Malicious code in transhumanism-blueshift-thuban-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d67c23d5b5afa24d365f038dfc900460ad6920968cb7725c1ff6a31a5a2172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185208 Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifobaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f64cafcdd09aac8c6c9cee3fb59d278a0f457583e82f83f953eeb3a8e171f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164355 Malicious code in poli-akilu-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faa091f41bce36b8544aebb42476d231b0f1df78c1c6500f652d446a98b6dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-faofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c894095158f06dbf00eed51c3f3f9d829fa8bea43f199d93bea33ec4af5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154058 Malicious code in cinta-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40172a103294b94e378e0747a3ff5077262a1afa322ab6d1c8da9391158816ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142555 Malicious code in fomalhaut-ultra-google-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fcbc513c0a9967340a8bd1620fc65e6e92e59d328195923c5bc0665411f5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124847 Malicious code in adverse_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799189e403f929e96908d0804961507da782b4f289d93b0f27fbf6400e772bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gaplek98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95fa42a7fd33b6d8e55cd5f7d78b45c49ac2d628faaaddeeba414b1365f3199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106000 Malicious code in multiple_louse_amber-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff61593395d271159c64a4a4b6f805ff7d45d8eb4e9ab266272b9f27503ff04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103746 Malicious code in hollow_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1343316194e3bae1886f2a335b5e8c05541cfcce6c453a2f36b4d7188e2885e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8fbb0b2c77f9a568db397fb3a149b5a9d78e515e32759b71964710c75f1439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6c3f91aeaeab5327f4639476e0fe08b331ce65e9968285e9df784babf31eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2367468bdafe1d28513f16ee4d04d43381acfcd7f272fcee3a3dbad60246293e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...