MAL-2025-116912 Malicious code in rudi-pecel37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2f630c1ef4cd40a44cbab875686a6a0a24c5cf77d0db449ccf9e5cd7a2032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117623 Malicious code in umi-jamblang55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3186415288295973810de4b931c4eb6ad6f738cc07951862b8e0aba2981fbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117339 Malicious code in tania-kemplang3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308d3e0061f01019c85d69ccecd281145735e024b0b3425c0cf92f1548ceb12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111929 Malicious code in funny_shark_gray-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72110ca0c1c40bf9df1d993e398d4f3387a9bee554b532057be34f34280c9abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111679 Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111781 Malicious code in daily_worm_magenta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d10d956b2a03a8d770007e1e5505f24b76365470cbfae853a74c592cf9377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111674 Malicious code in associated_quokka_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629fad0fd8df97e4bf5f3ee6e1f528d98281d6db69b325764ca634fa5bf6f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_kangaroo-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b640c5b5c40fdb544c07a19977c5dd1ae853cd3bc63989791909db123e5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104258 Malicious code in institutional_locust-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4476cbd934a8b4e263defa08d6126a3057ecd2475849d20fd8328a91c74b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c11de84fe93d0fd0ac4bea2ff0ca0f516bff30e2dd32bc86e7e8fbf9e7e852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106214 Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105291 Malicious code in lmxqih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bf63a6542938424c535cf424be087b8094c8c9f9dc92a98785a7b625a6e03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99979 Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_jackal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc66da08afd9f0578aebccad35605278cddf7ab9de43f6526c08a79979b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107417 Malicious code in public_tick-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...