MAL-2025-117336 Malicious code in tania-jus82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674aee7a8f9fca9008df08f7f7ff2ff40a3a6ab2084b34ff70723abeaad36aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111787 Malicious code in dark_quail_apricot-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0309e6febce7225fd52559c5db9311a3f2e381127af9b7d036dc9a8a4cb4607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111761 Malicious code in convinced_beaver_white-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a238156783fa3a897a44262decfdddc0edc8d69aa14dfe8882494f7c11ecba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_caribou_peach-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285c8e7d26954f805c8ccebc538afac89b2dd13a910de962dfc635ee3463836d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_mammal_salmon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7ff4bcfab07bdf835ebb6689cf54dcc0a7d9f591ac66d181d683750dc7a21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_wildebeest_peach-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5692ce1cb6a0df9b829e12d271d475be53269e62c483fe5e225763da3a2ca95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112422 Malicious code in unexpected_hornet_aquamarine-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae6fbc4abc2f98dc43fef4a51e06c962531d1a98d38dff2daf88fc9f3d7110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105131 Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99273 Malicious code in agricultural_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbff9dc293fad033029b824d051a757a29917e6d995099caa6719f4fe406587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106822 Malicious code in other_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0610f878262a93b64fd21657278eb658555bb9d0d17d2e5a493ad09c198b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107403 Malicious code in psychiatric_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d32364306a82316de6b9c9393687c4ed90c28c9308fef3d1d837bb3fa78342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106903 Malicious code in parallel_tarantula-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54841da5370b8ab2c008d989f7edf32f82d82babe717bf40f595e7f434edcfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103367 Malicious code in great_alpaca-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3e210ef34ed5bcbd03120ee1ecc8eae1419bcbda9b21b5c5e104e14f895f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103322 Malicious code in gprrxf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0d293b6780843647b401913487ae8a4521db4b7e6db85779d35281727e2db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce3f1e01f1dc8a0c517ae7c02e1359fcf22a88d5c3eeb2f42b3ce7b55081519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106395 Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102260 Malicious code in ethnic_bat_white-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f3d3a54575e1457613e451b84e6d282351aa47e882d260a8ed4472b436b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smoggy_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76334ab953b08e5c553641bce9430cd8fe8750fb6fca65ce0ca16dd52670ae28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...