MAL-2025-115412 Malicious code in left_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681e2aedf3916881effd90f3c04079715c9bfea2a17b3a8d794618ccd8fe790b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117675 Malicious code in unemployed_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb8615af233a7f9f9c1cade10a5fdcbb65c68650c703fda7830d9d69332e721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-jus7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b6da57efbb16be99c04da115dc1ca9b6729b4b94d362aebee69297ccd89391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-taiwan86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceba830de1842cdc04014ebfc4b78f3bca3e34f18e059f18509ef05ae2d3bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114131 Malicious code in galih-martabak100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2044604a8bd2ca358dbe77b5c98971bcf04c410256ec69e315062fc6dc684f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117879 Malicious code in vida-tiwul28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff8a6e20fbbac815038b29560a75e3904be7366910e22aa4f8b9647ac9aeab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112825 Malicious code in bayu-mangut54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ad1ff22beb1c5a86136872981d49c5d2434b9cb4b00ab11b041d5d084f9229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112640 Malicious code in alternative_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f470026a9a0a3b05a2cfad57053e0f547e772e53e985f145f8b7b5a1e7052c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115051 Malicious code in joko-ragi82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d3df33d1e51ae7c05a50e6f6fb9d341fca0954894b632dd9b2b73e0a24e91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_koala_orange-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d11cf6bbd94c0329bb007d7f4d796b1e2d4b76197a1676fc359da49afa1d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_ape_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa9041f185d1b2bc827305eb9b8878554964c927f46f25ce188b63965d50db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111740 Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112188 Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111701 Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...