MAL-2025-113709 Malicious code in erwin-kepok74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5563ac9bdf57c41932fbf1d8fa136d3d43ed9efc677bd9be98a9d3caac21d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114830 Malicious code in interim_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a979d168020ac30c4606f5225e3b8a85f1db29d18fe5d3cccbb77012b544434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117410 Malicious code in tiara-kacang88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695f92d99f8f0297fbc24826bd3326ca0ac173e132200d7742f5c283b99373e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_guppy_brown-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a0b219b49958b23efb83509091da1d579f28ae12154d70c192330b1190f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_armadillo_bronze-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0631d6afb0be8ae664400e40cd94ac799833ab6ddd259bbc61bdebe9b08345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_guan_aqua-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5a0919a858575de3560f0166cdfd792f7d5e40ad2c32e5a65f969120bca8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_booby_salmon-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eec6afff539bf37b6d8bd9a17ad995ba42abe34645522c08eb697a314ede57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112359 Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_asp_ivory-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45725ac2914a1a152760b84f4122dff4b1148c941f6b8dfe661afb5a72fa8680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112265 Malicious code in robust_ladybug_aquamarine-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e36eb0d3b6bc451ec3283a6fecf4946990d4a9e7d6dd014dc4e2b74d514b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112491 Malicious code in ytterbic_anaconda_red-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3a777a779c28798c0cf8c7b34e21b007c216da4025a072fde2b5270a2c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111720 Malicious code in chosen_beaver_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce8e19445af07c5b051f7090b14453025d7e79377e2fb44037831ed9b326f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109242 Malicious code in substantial_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e34f364ad91a1a39f97ee9f8ff032c2e6b28ec2bdfa29af0e575f638934ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102025 Malicious code in electrical_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2879461134a599155a19c7f4255921cf3a642cc6d92bf692577e2d47624affe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...