MAL-2025-116173 Malicious code in ogi-bubursumsum63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd19ba340307d7e8196ae47beddd4e21eba5f1758f5c741ab5e15458789fe2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115676 Malicious code in mahesa-rawon75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d739966d8132bf8430fc641165025c0d363176444a2b0fab14ca700abb7d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_walrus_lime-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c122efc7ac8aac6e14905808c3f1df67cd5d2d8081aa901339c4b5cbcb278bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_sawfish_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146925d01ceb9c7866c0d8583ba28de71917c40669bb29b6a65ef23c60d16d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_whippet_bronze-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f75e7257f9258c99387f5044e6144cc690e3970a02e26cff524a417408aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_hippopotamus_orange-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e663c99b0accdfa7a6401cbb4ba94280dc1bf52fb68e5d9f4f15ab1f0e83ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_swordfish_gold-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9f1f9e843dda8cf1267324b29ada6688db5fcf5451d9dc6b67ad49218122b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_fox_green-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52f64c51ff8462a46929f90a42934827224162e451bcd1717f2279ab3f3e843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_dormouse_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6887f08de9725f3b24b876d33bd321821c1a4204fec7f5d5cc9ea09c53cc7139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...