MAL-2025-117260 Malicious code in surya-brongkos36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8c6cb7e2dc198ad76caffcc8388df03e73af5c095b33a70b5c0812daad16df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115788 Malicious code in maya-nasiuduk21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba25a0fef37d7fbb345d03653c2ae87a7e452141ccce0647a1e96fcfbf037fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a30bc5dad473e511972a3165803b78cccab42b31b65594eeffc81bcc69dd176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tek33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c811e619fed25f63f3eb8163d6051c3b7ab2699d78ddde365c6946e2b08e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbf88844c2187fbd376acac2153ec6e0fccff71a4d4ab341d8d68c203077e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-saguer22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084da53f6818e34a6caf1e9dd8f0fd0f09844c66c65e5f95b247c9ad3bf9661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113100 Malicious code in cindy-telur3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ebfe81318fd591a96bf66a85f32dd0fd3b28fe18bf806ed24c7874a3ed937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117901 Malicious code in vina-lapis54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70963959263f9e4a1b7c3b83e9f034b961acfb9b51287512190f56e2461e4480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_beaver_white-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a238156783fa3a897a44262decfdddc0edc8d69aa14dfe8882494f7c11ecba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111814 Malicious code in disgusted_finch_chocolate-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274b57dad0150cf911d2c30449548b004a184d8d81e51f544a2eae539ad88f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104547 Malicious code in jhelara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdf3ac133dfd5b3b9c3922ce1bf658bfe6d472aedeef343ff13ed76e9006e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101325 Malicious code in delightful_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b48ab3ea3169a7dde866b23c52c5acb8357bd1d5543d831f871d22b87add315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_hyena-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a1ab84c1bbb2a1123ad933fa11c482fec6f27fa260a25bcc45c08e1cb2a031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111270 Malicious code in yearning_boar-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0188f6151c52a9e60f94d0df26747061be5ef8ee2f6943a72640900bba63d5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101203 Malicious code in dangerous_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea3a55c94c57e1a5d84798b9c21a020f9d4b930ea03ecae9a856f948da2a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fb4ca3d679004220beab706274e9f29ba5e9c4ac898903c36c2a81a4151df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99950 Malicious code in better_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1063a7031d8038e7c253245edeaa99871f03e34d9fb22eff28fad3bf2265661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c09b61024d2d0078533569571a436c36cdf6834538615136999cf4a6a74e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f84233ea1c756ba52cae0a8b485b942ec806ad62ebc21235deee4fc417ae7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...