MAL-2025-114267 Malicious code in gita-gulai95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f44c09df78c17397be71da46b5b7ee6afba289a84f80b1a84d349fafa296f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115002 Malicious code in jaja-toge71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36bf008573de7a3a7fad9adebb6c73ceeff6c9ef312ebc6a1e65f69fcd30d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_hornet_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c45d6bd0c415f8729bb0903b6a860c396a2d6468bffccc148f1e208360e3fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112451 Malicious code in vital_caribou_peach-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285c8e7d26954f805c8ccebc538afac89b2dd13a910de962dfc635ee3463836d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_halibut_lavender-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85aef40b3af5c819396cf237af6a7f16701e477a8b70bb2a10c215dcc60f6668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112336 Malicious code in soviet_muskox_orange-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455af39d3405ba3607dd0dfe05da53802507306fa7bae4c2cc5dc3f615d727d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112379 Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial_primate_silver-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df467d8a96c824e60f2b8cef79fd1f24bfcab99724ad6394e418c1f788b1af12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_asp_coral-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d362b29c3a239e95f87dc0167aa15c70c94f4bc88dd2b30da299744a8e81f09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112397 Malicious code in thoughtless_flamingo_amethyst-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcc404a86eb59bd5fd235ecc50284cafdccf103cb4c9e78a9157d09a348674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106813 Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105451 Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af810eefbb0da231f162e0b37393fefe729b97a20734c2d4a0008464786c0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352d0085d22631a4177747be064a5da0884187d0a7fc4c94c7b8b5bbff0f14c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110212 Malicious code in upset_bobcat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34972ab5b5e2b106ac4a9ade92a447aafbd2a6467b9b357ed7a7c8686d3489b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106506 Malicious code in occupational_grasshopper-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8aa1f05c0975298920d2fe4cd6a95ee7cee904835749e6d30a9de1539aecaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_earwig-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861ebdea89bcbfcd1b30ed7e6d17b0cd253a98c15cb3f74222fb294a4fcc294c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...