MAL-2025-116858 Malicious code in rising_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b58e3df1f24ba1e2f5c7fd4a3bae50b4fc5e2f25ae90ca600e275c0ca93da75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117237 Malicious code in subsequent_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80df39499f3e2974a2d5a6a31aa9917ce6114f6dfe03e321291503618b45cfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115051 Malicious code in joko-ragi82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d3df33d1e51ae7c05a50e6f6fb9d341fca0954894b632dd9b2b73e0a24e91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117289 Malicious code in surya-nasisayur84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2a61e270050702db0ac95efea7ab6b28e92aab354f831bc1a61c85b6cd8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113421 Malicious code in dian-wajit73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d65248e139390f79b768d8ef9ca434dc45fdad5848f0adea0063aef0fde1200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_ape_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa9041f185d1b2bc827305eb9b8878554964c927f46f25ce188b63965d50db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111701 Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111740 Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_koala_orange-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d11cf6bbd94c0329bb007d7f4d796b1e2d4b76197a1676fc359da49afa1d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112188 Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogpkyi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a79114c7a56815a24eed639913abfee12a041674ad471418af9503d6b88cef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102274 Malicious code in eventual_hamster-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f8eb01746e33fb80677ce4346a0994e19c9333911158d1b1e3749ccc1eb7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108452 Malicious code in seblakkuah15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c14bd83430162cf82a7cd3247c9075e54fbe6b49403c29567a63c3f46282ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100881 Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108891 Malicious code in social_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf692dfb1b6c534ab3b39ebe4ae5a58b5f1867dd98ee9453507931b099f21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...