MAL-2025-114149 Malicious code in galih-rujaksoto50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f80467f2d3d04ce7d70897e62e11f0e5b47bb4d02d334a740b4a091ab766a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118223 Malicious code in yanti-ketoprak30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d68579ea1c17d2a09dc8a081412b22574825de1ec9e7ed65df3cecc0a0b5bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112304 Malicious code in shy_carp_coral-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a2a9824d3b75c21e49930460c954baebafcfb54f41c20aa4ab09166edb49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_cougar-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee38effecb2ea2327fd2aca106710d0c7ca81d1e6212f9a6e69ff03c251e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_gull-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b762c251fbe710e2a20f5b7ffc78a3f9be6663db39868877c4691e4952b1c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103970 Malicious code in immediate_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8ae812b43354a7a41042d52f81becfcfb3a84bb01ebb9cc9a25e5bde916884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104012 Malicious code in impossible_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55839d00fb26799deaeb18f5bd6384e4acae91e06263fc580dce2d9676b513c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf59120defab5438e22f07e4716dbd221265e56648ca7f079ecf8c33aa8ca17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106790 Malicious code in organisational_meerkat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ca82af1f82b7fe5256a103fd3f6b612c4ff7fd3ee5bc94466c7eef206fe85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99473 Malicious code in annoyed_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f81c3bda732c1c16ce0f2cf38c744ae50441b35c6920a91e8ce34ab59c937bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102101 Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100196 Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107639 Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103809 Malicious code in hot_junglefowl_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6056859bd790f17f4d56d0b43bdc4c65cad92131a4c269a767b5df5b48c353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c3d97701fdae7bc0b65da338247a7d30b35e1e9c978580b2a418cdcd033ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105016 Malicious code in large_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53ea88e0266cbe32143b4bf02860f9926368cb3ba2ffae85cc6f5a1bf0b595a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101778 Malicious code in driving_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495b6eec423fe95b56d348c2ab8698554d63d3ef8be79872030466d38c144fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100768 Malicious code in complete_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969d71aca390e2a8f14d219d3c9a9218fa3b0a49949a103276dd18c2a0934352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...