MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188915 Malicious code in proxima-neptune-altair-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ca7458136d92609e9587dd89f19de7cdd64b1288bfa111ccf3d25f03a46d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185884 Malicious code in bootes-reveal-md-cache-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb7748dc176d64edfdfb72e752149d9195e91e117f7347bc52da30c4b3bf009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaulahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a30bc68f372e5170f6966a3a847107ab68b8a023b8b584e0c02f74cc5caa96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-aceqa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8da4a8ca46b3377644165879ebbac3205501799b59f904b580b489f9f71764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-ufisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06c2c3df1295b25c44608ab420f61d42d351f781f4f5e5e3d51a3f56b2e26a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aec9b1a89edf1d1cbf8b8a2b815da6add699ee7d3421213e006d0ef38edc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7971b3e149a13b1b8a2add0cfb73afccc42e45718eef695f5e209d55f57bbd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe95867ff3ca23adeade67bf0586ea253a5aacc2bafab90e68fab593d9e0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uthi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419656e30a34414d961680d45e8df5c828e689c595d4b4a9680af7a57b701960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengydru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3038a2d49527fff17008ed236d6f01e78c5ff8804c2ad58d952746e0840be45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bavoisbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e93b214f10f289997a5e9e525c03db4c58cfa135c59b9219482c023e33bfb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4456d91d0e5c2b57fba1d4d9daad2ccaaf392a8e92eac468082a33bb2859939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761e1cc77ce5ce1834363046303b894b962fb9a1ecfd7427dd3c8ef13fbfc41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497fec8798263c93aab0cea87e6ac71e980c2b8043b2bd4c0468e6637c39ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e3553b88dd8bce29840ef7b04dc8ab513fb2038d77e1b44aa6a61be0fd55ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...