MAL-2025-117159 Malicious code in smoggy_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1337a5de9284f77eb849324876e5144b6819edd11ec643b20c9b5e45b63ace6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115588 Malicious code in lutfi-ikan92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a588ca2375f34dac5fa8fcff60a615078147fe424a6d7e0bf399546700fe0c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115030 Malicious code in joko-lapis96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d882f48cb06d626b677a286f84b83e4cfd818baaeec1c01e7b5546949f1dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113903 Malicious code in fantastic_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cccab8c84fbb6c8dcde9039d332d9d498a9a1e095e977d088bfa6efd956a9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113240 Malicious code in crowded_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0feefd38f929582bc09430f3257321ff9a57440671a7041a84c9e74446d30742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_tarantula_amber-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e89c67cb1ded747a7fca5760192c7069a55c68dbb3ef5ee469273e0cae064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_wildcat_amaranth-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8efb556983b6652fed37a875e00e837d62b07a3b400af4a0b58d48a60a52f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112138 Malicious code in nutty_aardwolf_brown-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d030e378426c3fa4bbd9f7ee9cf104f2e34c10b6a62096428eef0b4a696c270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_leopon_emerald-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82df52957fe7d083834fb58fbb684b4444bae4054bf2c831c676148468419892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_barracuda_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0916bc1d588b00a01a6a6c7bd78806b02ea0c25160b50de183a21f34797206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112112 Malicious code in molecular_turkey_black-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3cbd9ccfa20d11600b940c652b851e7a5c4a0dd3901fb6dc7447809b738938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...