MAL-2025-116588 Malicious code in putri-sambalado88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975cd59443c5ebf91602b655c7029f912ad753966a980e06790f7d267425818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115497 Malicious code in liquid_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96bf379c7313233807beb40e796dc18c1ec818f94749ec60c3a0789f4e6a8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rujaksoto26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0774e76221d178aad6ff8c69deb1111ccd4ff8c169b481dee4e15e11e0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-klanting12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cd3f62e72976186a2033d67b4b7dc350a6ffc29e84359d0eb8581c9fed69a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-mieaceh59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ad14432f7389fe42bffe766d8e5a4893bffe71760e85e1dc572bd6db882383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_deer_teal-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62918de0fbd144ef3982412581117db27b125e0153bb66f1575d9208c1f32609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111768 Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111948 Malicious code in glorious_frog_green-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96508623f39035fdbb4626dd3484f4158a2daf41a705a9b55a7c5499fc165b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111953 Malicious code in gradual_ox_magenta-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b67f959bf52f9a1d099159c7fec62515c687ae1b9c0ebd43bbaff2f09de4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112492 Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_rook-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf6c7627a1ec20e21d610d0de36a712b9c8ffbf995fe155689669a40e0ee27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...