MAL-2025-113000 Malicious code in central_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dba688caac593d3d94f1827e1fc91e06659e3760cf502d51211b0646ea6cf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getuk80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd357df66a9cf9fa1e63d91ef9c1fed773af295af3d0fbe1a154245e823cb0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-toge84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e48a3b0861337b433c1c7d14308ea90c86c12f9f816234aca28417e769757f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tumis86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6845c5afb36841f7c2196428a8b8ae96eff415eb5ffe169b2d777e82570d6f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118078 Malicious code in wibowo-kue68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f808b4dabeebad0bb1ee894038644946d2cf0899e907f45afdb8894c484ba4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115149 Malicious code in kiki-klipo5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b1357444b14161a08c92752172c6e34c5411bb5c235673994c156a362bdc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114046 Malicious code in fitri-telur84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d8b25fb5cce22bf88d76a7fc0db3bb8b44321e2bc0c0c20a22d62373d6c434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543850384619a9bd54ba9403025fdfc40c8219dc90715388fb1c559eda7d606b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-gandul28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c6c384f77ed8f5fb089b38e9f28b1b19c048a528bfa93350d6af0bb46c653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114954 Malicious code in jaja-enting60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb3317a0d59cfd50d2007d8bae0135f5945e532b0887054b6daf5e085a75955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115800 Malicious code in mean_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbe17fc947e2d27d20e55195899127755ecff4f1ace36826e0223c4f1780d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d4cfc7e4fc5ee5c3836bbf729eaacc6f032b8ad8341b8c9a91ddb2c4f196bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112194 Malicious code in poor_wolverine_bronze-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7397eccd418246bcd9a04f72f7862142cd2e9b785204d1cbdc45e7301745e89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112303 Malicious code in shivering_duck_indigo-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f55523df63c86b5ce9746fa681f2295d68fbd0b5006389cca5fe1b06f31478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112327 Malicious code in soft_goat_beige-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064f87e3785816732f82090ba27f50c1aa0dd8859a6669d7c4255dcb01463c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5feb7d0f639348b19e402d473f79876f9187bb43abe5bc44dc3ebd5523ae89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101624 Malicious code in disastrous_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852292b43836c900de437b369d8d955b8cf381e5f1ce2345315537642efb2da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105760 Malicious code in medieval_echidna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4511a3ae113cf4a2f9ea2ccefc2fc0064287533b1b69cbe9402a6882f3fd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109706 Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_silverfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c482d95de0d51eac8c9b1f1f294153ce242e4df82e104afde3f3adcfa3b69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...