MAL-2025-114573 Malicious code in hard_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d13e647b379eaa77df67638c2be208adca6743a9c70956ddea8e68d553e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114104 Malicious code in funny_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98034728c7bb35bf14423886f56f79c35e2420f6d91e1bd6a21e94acd0844a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118534 Malicious code in zul-tek83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7d5f158cbc186e70aa67f87ba165cdadcd993e0f54dcce33f7098a3f133e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-bakwan11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3983e0dd8277cba20fc1d888c2d7754c13ce0281349d9e6f1e704cad369ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mangga5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2983ce083a4b4ad8bc108d1f2ed6e5e6c1b52547efaba54a9c8a02acc1a269f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rawon72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7f1553780c39a66fee52a549f4ed0892a18b0f1247293ed7812affa389e816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ecdb73dc88dbede398f6fcc1ead1d85c9c1f8f371cf5cb1f23eea68dcba36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9806c5e3b1c05b4d0b0dbdc162798d1c21f3e0b6846d860ffa07ae670d7fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b4486075440c4a7505c80dcba1f8e6b6aaf107d7dedd382386b15d1f617d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108868 Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cc5a3bed029157d9600a7c477c40d0cfb05b1e60566bbf60f9ae1e46a38fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104297 Malicious code in intelligent_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f356dd9cc7ba3f9351064d371776acf7119b684855f5444109078ab58d3350b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_crayfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ef53705738d188192cd9bbd97a07c14349a33ef6bcff021410e456c7a15df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106993 Malicious code in paul-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb925b387e73ce7131594bfb2131dd4b4eeab2003120c31320beb253990605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f946fd9a2857ee8fdcae30201093192446815da3f42d3b5099c4afe0da2d61bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99575 Malicious code in arif-miemee51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda967990dda88d696ec375fcfca353703f2c7075f81cc8438ad7027fe8dcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bff6f5a0ab7f0a3b3bc2c037005faf61509c63cb1a9123241ecb5adf2eacecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-bakso11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e90fc8bdedbcf93aa9905c0214bdc1d0881f5a3e8be35fe815870a2659110ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...