MAL-2025-113892 Malicious code in fajar-telur94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523bd2dc538162fd57a0eb8f4456dfa30147ad3f903bc716fb915513110b15b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112888 Malicious code in bella-sego79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500d6f27c360f140571e2c15af9b061b1e39b173c5e1b4e2fe84912ee13eb44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-brongkos75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67a08753f73865ecf2779b8637650dcfff4426db64d84007b1ea8759edfd03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ff404174c9cd0528f2b659ce4c18b9f7c3795afda80ff726e0b4c37f94f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-ronde27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b2e2284d74482134d00a5a283af3cd673d258c29f5a89fed0ba59c5bf4e7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112893 Malicious code in better_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a0d5de77caf6bc3ca571f6d236c92bdd6ebbdcc9bece85bd00eaea281dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112871 Malicious code in bella-kue46-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ed587fe4604d3318a84ff5f29bbeead8a7ba1dfd45f703ff8304f800c4c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117387 Malicious code in terrible_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39d830385bfdf68c4bc83b7c7a271d4ffc3cf98debb12f186aa26e976a229f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117945 Malicious code in warm_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7afb72e9f16e4445d37638d1fb8de77bdb7663af8c33d324003b27f8a45398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112520 Malicious code in actual_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cc458711829ffa4bd8108ac6a90e70d35d827f70546c2adb2c49e21ae4ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117532 Malicious code in tragic_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c3ae35687e6a42fb09ec80a66d26bda860c59e90a06f54bad02d86a8097f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_guineafowl_orange-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7252399e3c73bff2213d69c3523815fd5c297aaea95cf3a1616e2bbdc577da97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_salamander-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935b2c46e8c183205a2ec07054ce8ec6ac6f452d01e90784b55977c9d406a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110644 Malicious code in vvqvin-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d074fa02b7e46795c9452c079974e0c843f32371efbce5d0d7d694d7af92311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853e785b873a6640d02a327b0ec6ea9dd59197901bb184ea3feeecf3422bcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_sparrow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3500d170789f980c3d15ccef92e3098d7ab8b169c6744ebd0cf1851e1e3d98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...