MAL-2025-112674 Malicious code in andi-takokak38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78af7309fe2fe5aeb524f735feace002e5ade00d0d04aa07e0907fe26da5216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tomat100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd9248d9c66d489eb8386dd20c73635190753c776ca12410bb2e3330fa21e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ronde3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec32a52e6e8398c7f6c9b130d303c867ed99be35f0ba25c01ab9ff09505a094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f338d970cc5101ac68984c9d52950467a13856fa85a541f5da58ade9793061e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116002 Malicious code in new_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c2679f5597ad447d1cd514f9d85a4a75e65d9dd904fd5bd3b528fa564c9118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116315 Malicious code in organic_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527512840951ce60cb48631b2a7974f843635811f89ada0e24746967afe9a31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116368 Malicious code in patria-mie89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36163587b90845f5afca4eb2121c58d82323fe997bb08592e2c756df588abe46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114803 Malicious code in industrial_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f80ec4856f68cd99793c4ebce04c341dcd0368aa5a9c999a6969f6a3ed26d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112760 Malicious code in awkward_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07630cd05a277cc8abe5ed6ec9059f55ea795a81f92bec1c696ae33d7241519e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112053 Malicious code in legislative_mosquito_moccasin-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc751b5546dfc825ba41887bf8ff20a9ee7fc949743a86886e1505d607d222a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_warbler_turquoise-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbd31002759948857d019ba3306e2b38b281511246a6d6c89a9d8eef6289edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_camel_white-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde7894b976607a6830621a113a1dd7e4dd2eab866bff5b483fa2d58fca0189f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111987 Malicious code in horizontal_giraffe_gold-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b608b0e2822f2bd8a43f3fa615e282b7a415896d66ffc5f69c91c9c10a4654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_minnow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713198c620745992f508abe85b5e5a164ebbe7310aebce5b9cf7113fb74717ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_nightingale_ivory-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7b6a3d5434fa763d2f64c7059321413df0ac6e150645170afd9d265b2c234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112010 Malicious code in inclined_possum_salmon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd467acc34f3caacae55a820c94ec51f73d72b684d7bf2cb990c23d3eb59e4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_cobra-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16911fe8f9bd4b786d7aa298b638912112535a7513e8f39b087f8dc8a708757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_wildfowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f764ec93889876804e0180db02a19c5e486e5b468020db1b6fcd1c7995a28343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...