MAL-2025-118521 Malicious code in zul-rujaksoto79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b14e4b0c6eda47484e9327bce3efaf95b42322c18cc907e150621a629964263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116410 Malicious code in political_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed4b389c46920a014a091dabcba25df765e69f3c87e613b5c5054bf76e57aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115368 Malicious code in laila-kupang98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fbe0df08747a2f47265e9c4294945fc60d9e3b67bd9ef61c7b09617fd84c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114265 Malicious code in gita-gulai85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced68bb458cb8a42cb5c75fb959943b0f02098c97913d4d01fafbd87364242b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112876 Malicious code in bella-nasisayur83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc19b581b3eead411257b3d9835d6de67bdf7f67def4463a6198fa13dec5db1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113217 Malicious code in continued_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26177c74cdb52c0fed9e7bfe46b07b9a5db1780c251a75776a148f4d39926440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_grouse_beige-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84317f00281b604fd27a41c60a1e3453221af7d6a0d1c4c2318fd83e6ab09ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_skink_violet-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b80e3cd4cb6528cf2820b9aa2996c687891ddd57641f0e7d4600ed83eef3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_yak_coffee-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_gull_amethyst-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83bc4c97c7aca2f5d460d667b7d584498b7e27b6ac4f3d5214922d99b31ef78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_guineafowl_brown-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885f317b187c00d027efe4e7d2a72e092f8a5a8d246552a2eaea141d1be02066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_spider_violet-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727143b460a8942297a9aba3f7d1bd4f8a572b6321c264d53b2c92c704c7e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_ocelot_green-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea290526a3ad5abc584ea98abb5e9f98e4f7360567e215eb4da4ed373e432313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111709 Malicious code in bumpy_xerinae_cyan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcbf681be54e4781717458bd162e879feb22b7c6d99524bd5caca2429a28346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111798 Malicious code in democratic_lynx_bronze-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07c3b9e6f0b5497ad70775ece20ea39620e1967615875a328462a3cf4a742e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111800 Malicious code in depressed_dove_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09485d9e4823bd203eec0f54596f869da85dd7cb5d2a2570b710e64c5929f649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112228 Malicious code in quixotic_guineafowl_tan-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6973839786f0e106b59a7c2726eec0f023297d86db4baaf71f0d91235eee3a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...