MAL-2025-114596 Malicious code in hendra-klanting19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74b9ef6a3f23bc49ad9b359a5918adad5408b61b3557df6a4808c86d6772f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117039 Malicious code in silent_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d9caca5b39e253a6307b19e249ce43ec0d8e597b16594078f54472482d7dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117621 Malicious code in umi-gulai64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafff96762c93aacf78348d524abe5adf13fd54e08ed29aa8b2af14d6014187e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112625 Malicious code in agus-telur54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6eacca5b8a1efb0321b15f04c544979603a889b50aac22aa2846a5c454d103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116021 Malicious code in nina-lapis86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75d9be7402e983d29411813806cd2ed9f67637c7f7e3ba4d6b600ca13608c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112851 Malicious code in bayu-toge80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833bc39c1e912991435f609aec660eef5e130e09462b5f90b714f39e5d916de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116333 Malicious code in painful_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620a96f605a5ff654005af3ff2608140c587c4bcb208dbc698f8f43649f11d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112358 Malicious code in strategic_butterfly_black-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a272b1ab5e5219eff4adaaf45e27a6ed40c58181ef7a668ef34b08f70b2c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_crane_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6688c417c1e3b943de3df667521579a13ffec5413882fd37cc5fb57f009be78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_mammal_salmon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7ff4bcfab07bdf835ebb6689cf54dcc0a7d9f591ac66d181d683750dc7a21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111949 Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111808 Malicious code in diplomatic_caribou_beige-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b878a7cb34ab8ff12422863f3421f6df0ab88690b2f9d81a1ecd6b5dd3a93f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_tiglon_rose-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8cf4a8e4727fad36826974319cba81a3327253268d79040dc6e6cf5ded4b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112231 Malicious code in racial_turtle_azure-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1f16bc7a7baf79284744d7e22af19925bc788679de13b8dfb14f83e5c77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111657 Malicious code in amazing_squirrel_beige-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b9e5f426d96b6833f80c738103f071d317898282743dcdd5670cbead8237f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pomegranate-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9626bc401b942c8814ba3b920f1eb300ec76318d7ab845fbda660bd05be931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6dd64699d0dbaa90c8c510155ff5c6213ae127a1cd046dead8f167774023e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b818c1d129ffb3575fe48bb0928c6d33fd6e0ea9269b51b04cca49173b4207fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...