MAL-2025-118504 Malicious code in zul-lumpur14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef237bff6c2396f4ec365546294aab7629f5aaebf920e9a859fbffc48e62f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-rujak32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7304549d415eb2255b387329b2f595a42d5d3e9c891b75f57647930c4eeb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-martabak78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f34213da1379ae86ba8f381c595ca974f977a178f517c81460c95f137e0e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118403 Malicious code in zain-teh43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accf7759e654de295cf34e7f302a488cc863e0df776d301ef404363728b75d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0f92683e8b0a4326a51e9c697cc37618e33fbdcb973cb179baddf15ebd389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-kue1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0c6afe3c087895de95c436c695353f78791f4adfc7c5e779308b9de686a7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_gecko_amaranth-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e161a370620d33a7bef5cdaa9876e7eddd5d7dd15391d5af0cdf3f5dde20de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112380 Malicious code in systematic_gull_cyan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ab789135f250a1f79402633968108a09b4452da40f27a44779997411d2e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112028 Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112494 Malicious code in zany_mole_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d988fbb16a7f6c3650c4cb970b298ea70776e441ab478968d56e313e2849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111970 Malicious code in helpless_mole_aquamarine-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbc7862f706db4e63fbc7bb43a277d0afe160854b6e66b46b35382b322e3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b4486075440c4a7505c80dcba1f8e6b6aaf107d7dedd382386b15d1f617d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hraxisys-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3ffa1d448fe520d2bf7cea5b4ad772abaf8152ac844115f2a7e20b235fc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...