MAL-2025-118037 Malicious code in wawan-taiwan59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba7a33b7f6cf49eff7292fa1fd9a0236e61325baeba6ebbe1c2bab60e8c83f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-jus54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c245e77189d44df6a6656dd7239adeb0f8f2be6393d799f4140dee1598c0326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_worm_aquamarine-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16261f0ee471a3bd1732609e5b854661a46a60253ea8d0687ebd9ddb2181ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_dormouse_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6887f08de9725f3b24b876d33bd321821c1a4204fec7f5d5cc9ea09c53cc7139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_kangaroo_olive-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92535e5084d8b9f297b29cbb162d1c112354ec830dd26316384463e500b76e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_hippopotamus_orange-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e663c99b0accdfa7a6401cbb4ba94280dc1bf52fb68e5d9f4f15ab1f0e83ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_zebra_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7afd9cd69208f6ad3925a63a3dfa39b73a4b0977fed185848faf95cb66428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_canidae_gray-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e61282c538d1eb6fd3b95cb698679e5e659d3e744e9e52fe8fdcc5622237b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112222 Malicious code in psychological_chicken_violet-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe8a687dfc486e523cfd66eb4f0ea4fbf0213c285de8b3fbe2cff81fed91d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112041 Malicious code in jealous_jackal_green-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9a85bc05b9dc8219a9f1bee1de6442a7330f64c79daf3dd8f65eceecabf853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111801 Malicious code in desirable_coyote_green-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab26356b5ddb5241a91961a3d803f0fc6cde498b444b3db7dd65be540c3342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112163 Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111723 Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111793 Malicious code in delightful_roundworm_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9357384c4fabcaf0d1cbf51c4d1f022a63d0e8f9317e1f8813a9c0d6e497a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...