MAL-2025-117287 Malicious code in surya-nasi26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5624ec1839e6492a8304712abe69011f8f8b95eecfd15f3da525d92788db248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117550 Malicious code in tuti-keripik76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97665854dc6b747aafe7a6bc308905878623bf1281612b9cac3e30b9382e5189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113453 Malicious code in dono-gepuk17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aad4a954dd5932224ca8687c34f8b9bac659cb7dbf3adf3dbde63aff121d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_limpet_gold-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44e5b54c3dc3a32b81221821a752ad2bee0c38ca5133ecff35c0ea84d3d2a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112453 Malicious code in vivid_constrictor_amethyst-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26299ea50577e56d809e5cd33ee1e79e6579c5d330d3c89ab7e4219154f4a405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111827 Malicious code in doubtful_barnacle_salmon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ee7fdf66e69895d63d1835295cab226c1ef9bf4a10e86f9b6d6d61bd1a4ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pierogi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97585b8dddecd94a7acad910994528de5eb462e213726d68e1a311255cff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107197 Malicious code in preferred_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac6ecb4d6e49713bfa58cbac5c05627199152c28b0667059d1299a6065df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104287 Malicious code in integrated_parrotfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbec436b375ac90bc41a917bd74ebbf27c02d28014ef4adfc5d88aa225115c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaed4886f0265b162c26d5783281bd2a7925441654c944292991ee87087de7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106815 Malicious code in othbxw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1078820bc7d1cb44e60edaa67fc7bc9f1ee306ba84504fb2da9ff6b2bbdd414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ouyrjh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6c5d5ff7fb8c384df3dc217b566e50885f006c4c363ad8296d207839896cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_hawk-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a637457eb70e695a6ceb8ca30444129b94b5b0340dda0854cd5b70e9afea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101014 Malicious code in correct_earwig-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e585ab8df4c3bf7ac14f8b50e67986e482f4726bffd85cc8f85fdd62f3cc6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100112 Malicious code in brilliant_bear-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892d232f67bdd3ba661d6e1130e8282a4200a9b543cbfc81a7fcf8286d095daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107909 Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf25572a7f18e05e73b42fa7607d97917094f7880d812e35bb13f6f0417d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100136 Malicious code in broken_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1def694a3c8823ea82a13adb9cfb303f042c03a388a3104216aeb4c66d0066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84081f9c06734417292d8328087b33a8fb18c97dfac5f2a0a9eb5ef63c0bc247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442180abd45581b601f2f09970a6a03f3ff17567092fe30d7122364ddde7cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...