MAL-2025-112813 Malicious code in bayu-gaplek86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69432163181e3c3ea11a49b3448d997788cea016f97d9c366ea38ec42029fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117159 Malicious code in smoggy_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1337a5de9284f77eb849324876e5144b6819edd11ec643b20c9b5e45b63ace6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113425 Malicious code in difficult_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c942a7c5acab35292212037d34b2a5a61f418903131ca30ca41b688bb90982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114383 Malicious code in grim_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1852048c9b8aac854e88f8039684752b0354de5a8cf87314559d2e9ee30806f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113240 Malicious code in crowded_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0feefd38f929582bc09430f3257321ff9a57440671a7041a84c9e74446d30742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112138 Malicious code in nutty_aardwolf_brown-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d030e378426c3fa4bbd9f7ee9cf104f2e34c10b6a62096428eef0b4a696c270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_tarantula_amber-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e89c67cb1ded747a7fca5760192c7069a55c68dbb3ef5ee469273e0cae064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_barracuda_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0916bc1d588b00a01a6a6c7bd78806b02ea0c25160b50de183a21f34797206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_leopon_emerald-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82df52957fe7d083834fb58fbb684b4444bae4054bf2c831c676148468419892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112112 Malicious code in molecular_turkey_black-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3cbd9ccfa20d11600b940c652b851e7a5c4a0dd3901fb6dc7447809b738938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_wildcat_amaranth-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8efb556983b6652fed37a875e00e837d62b07a3b400af4a0b58d48a60a52f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088b5511607ad62edcd65aba76c05b48265b76223b5c87cdaac144d5f063e096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...