MAL-2025-118398 Malicious code in zain-rangginang13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3841e52ce064577bd6879b519f82685a84af5590a5b7b53b8ce4452425d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bdfe5dfd5dde402aa88ed220521ab69e81c58f2bbe03450197f46a6d07e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f3de684208d37e2ed4c6d3ab863804fc7401e780b17fbd86e0aa80572905f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118000 Malicious code in wawan-enting61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6c9d6f1691c6feb69a44400d8cf9a7efe45afdf1724f1d13f4fc363e96b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-teh91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbdf3c6e38d67b64016a5e64cf8a830de6768dda20071007e017760b434f597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306fd0ba324f3cb3f4dd2868bc67834936d35ed4f226de457c9f4f716eaf0540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_skink-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb78d3ae3d591ca31c5fea3f2a91e83d9208102a0f26dcaf1b5743837cbb347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100711 Malicious code in coming_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4366498e57beca3d73510bbbb01d00007b15ac1383952a7021eda4ee5c75158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_silkworm-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03006fd9b338caf9558cfafce97120a720d9482071e99b04acc73475fab6c420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a662c3a68a595d1cffa0992dfa014e10dd668fdc08e0d4984d56793f93eb6c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4810a92490f4c556e9aa510d5f1823f957e7905fd2121f1ce47c39bae55a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e427d8513c7fd0730ff421b591367bbc7e8fb51ef5db0d57071229863231f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a40fd49f1f0092d21df196941cba9dab90659f5140a9935ed5973fad1fd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1387d660b37f3b5f61a43ebf8338fcf1abbaa1df09180df919859cf313c12e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100315 Malicious code in certain_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dcf2f96b33a5117a5b3f207c5d84fcc26c1da06bb61219bc4ae223253a89e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bc5bc96a029b449ac226442267fc8fbd34f568b3ac1b4486575b604945b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac2af0d00aa7483e21410acc5434f4d2dc504371519f3a178b0c2aff39758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8940485c46e60130791e9ae76a0562f5b0187bee368a32e21773eb75017ff83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b9b451a49b5a6a5cc53b93ee25424bf787ebad55ff5f1ab19279c0fd52326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...