MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116897 Malicious code in rudi-lodeh56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1e8b2ec72b29b35cb554ebfb31e56a00bf82f8b2c11995ca6691104cc24d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-dradag50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904a45625f766a95d5d26a2a5800d325b4afadeafc4034d21f7c30ee5efd1da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_crocodile_turquoise-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34da5cfc77416fc1434642249dab09c50a442406e9277bc660ef673eecfc17fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_leopard_coral-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7387cb512eac4397b63fab4db219c4996e48c9a82b814404a0e15ee4eaa636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111783 Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112174 Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few_ox_fuchsia-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010b6b8e9da2794fbbf7c5ffb868eb93def9e759310026724bec71ca7a5aace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112367 Malicious code in successive_wildebeest_teal-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a25a61ea99b3470066b094387434b06a6107e7a0ca1976f82dd792472f76a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_quail_white-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6085bbfee70ecfdb2261c938c51c9e6e9a484833621689b29a6068fc07564164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112109 Malicious code in modern_dragon_tan-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2161bc804a62d664b4da93a10a2b2acda43f6209f6f169030ecf5f771b3605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100936 Malicious code in continued_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c36ac2fd9ba2e0d6ac9057f6198334a07727b45c5a67785cd9a2e016c14dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef27171efadd501272e1b5908110f1108a0e6e7a80282e9d251330a7c04bac98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_sheep-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf19fc7f735addd1100929d89582d720f718e019de97353f8d26ed32cd61101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b95cb2436256624efe377a48b49b19eaa9684a06bece6045bf44693b0842c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cvrtkr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5806f741947c06a3e49ed0739177e5b45556af6f3ca117171665ea8705f05a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zwctzz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c509eaee301353b4b877e383c2a3a533dc4d74bec7265dd649eb2af326e4ffe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106791 Malicious code in orhacx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfaa56db8aefd0e56407ec4ae5f17bf05f6acf4f96fb0858f1e730f52176639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...