MAL-2025-114460 Malicious code in hadianto-klipo76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797b4fbc8798758c38b2fd07ce3fbe70b53def6aff9c12f328eada83ea9bf181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115030 Malicious code in joko-lapis96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d882f48cb06d626b677a286f84b83e4cfd818baaeec1c01e7b5546949f1dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115969 Malicious code in nana-sambalado1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c35b6a50e638f8d03718bdfb684c2775012293ccddc7fda3ab7104a09a1a1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4c2a4c0e7ac94585d81c057075261931f6819d62054495c5419b07dd010f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab32175d98ea774352afc287178d0f285dcb02580cd701959ebab2cdc0b84b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_barracuda_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0916bc1d588b00a01a6a6c7bd78806b02ea0c25160b50de183a21f34797206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_wildcat_amaranth-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8efb556983b6652fed37a875e00e837d62b07a3b400af4a0b58d48a60a52f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_leopon_emerald-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82df52957fe7d083834fb58fbb684b4444bae4054bf2c831c676148468419892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_tarantula_amber-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e89c67cb1ded747a7fca5760192c7069a55c68dbb3ef5ee469273e0cae064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112138 Malicious code in nutty_aardwolf_brown-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d030e378426c3fa4bbd9f7ee9cf104f2e34c10b6a62096428eef0b4a696c270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112112 Malicious code in molecular_turkey_black-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3cbd9ccfa20d11600b940c652b851e7a5c4a0dd3901fb6dc7447809b738938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103108 Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...