MAL-2025-114908 Malicious code in iwan-bubur7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1a002da30e480fb38d5334813d1d31370c377cfe57926ef4535c194156c7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114867 Malicious code in irma-lengko66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e821fd14670f38d504b2d82f8f2d7056ca66baf3b0ebcbd1e45b46549a9a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115987 Malicious code in naughty_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f97065ffa1bcbcceefecde56dc15aa3204f1fdf286272fd3f09236284bacde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113680 Malicious code in erick-ongol-ongol11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb687d6caa5318afa2b6430ae78c916b476dee2d8340232635a9b50022a5ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_turkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341df1349e97f3b43b74ce5833004f0aeea43aa21152ea5df512022f642001d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100829 Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_armadillo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61178633290e26f263213e4274be908056864e4cae26b3cc61fb7bdc36f0b22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_yak-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6d1e82b599b5342c9d4d33e7079dfe1a9d915870dfd415f9e4fdef35baab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111331 Malicious code in youngest_moth-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afa69793a4fbc5f64685d25d91fc8e66be3298a9bc6a40a0aa87fc34ea68ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107794 Malicious code in redundant_bug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5865f75de73e649d39b8d6d911c77b4816f4bd9291189c4b27a44aae282d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_squirrel-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc547b77bb446e7513b3e28af84230dd35723a056b6e0c69cd412f5383103b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0984431b3b8cc4d8323c1e4262528aade4e80b8c660d318612db66a18df65cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08a47a805590d957844fc0a77ad4044b12316e7fc89e03b478f2ea2ac4651e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe127e671734cbc5646c3f1b87d6e4125b450f10b3d9beab74afd17786302245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99980 Malicious code in binding_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d03d12a0ff58efbbe6deafcd9150f82296e89a26b2a5c0a5fefebc6bf270a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f312c4a710405eca6aefe169ee27878280e6d5987eaf9e488a3608c9097a726c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa20b73bddf6586e93badd770f5f44599f3438861f803c2edf99053e2f429c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...