MAL-2025-118309 Malicious code in youngest_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4294fbda156433287300ec0b3252e01a3cf3f805395426932313d2d947fe490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113306 Malicious code in dewanto-gorengan39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f29c53fb15d3cd5fc2f7ea40078123ca7f5cc185f281d2c01327f514598c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_worm_aquamarine-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16261f0ee471a3bd1732609e5b854661a46a60253ea8d0687ebd9ddb2181ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_zebra_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7afd9cd69208f6ad3925a63a3dfa39b73a4b0977fed185848faf95cb66428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_dormouse_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6887f08de9725f3b24b876d33bd321821c1a4204fec7f5d5cc9ea09c53cc7139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_hippopotamus_orange-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e663c99b0accdfa7a6401cbb4ba94280dc1bf52fb68e5d9f4f15ab1f0e83ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_canidae_gray-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e61282c538d1eb6fd3b95cb698679e5e659d3e744e9e52fe8fdcc5622237b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_kangaroo_olive-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92535e5084d8b9f297b29cbb162d1c112354ec830dd26316384463e500b76e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111723 Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112375 Malicious code in sure_wren_copper-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a488b5e2b4e61352fe71635c52fe1cd4b721693acf76b4a9444174f0a8f24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111815 Malicious code in distant_earthworm_blush-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ac16a40f60a05825615bac57bf55ee8b11b1418a0e30db0ecf29c7fc815760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112163 Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112387 Malicious code in tender_asp_coral-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d362b29c3a239e95f87dc0167aa15c70c94f4bc88dd2b30da299744a8e81f09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112345 Malicious code in splendid_spider_violet-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727143b460a8942297a9aba3f7d1bd4f8a572b6321c264d53b2c92c704c7e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...