MAL-2025-115764 Malicious code in maya-dodol42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f396788fb8637587deba2010a980118e5c185e5b3ce99e3d2e82f734528b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111831 Malicious code in dusty_fox_amber-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3f317c8cffeb6a3b1c09c04fc65d331fd84f395cc785db329c24133463105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109557 Malicious code in terrible_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bc8d928d701ab7d739f4619017f8052e5e91d46d81e3b7259fea8a55814a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107654 Malicious code in quickest_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c521c9753c9608583681c58ba5e7c398320a38e3cea3571ac5cec6539e0a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105931 Malicious code in modern_horse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6384851f3d467888c389b90e6762640a9aaa567f5a765a860c6b335c191b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116ae3f14ddd2397d9800facf63320149a898de228d322479a98069fdd715dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cecbcb0e8cde68efae32219e0917d6afa4f2f10a224810f204bfc85480e3e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809a82afdfd64620c3a32ad3f743b4c89fdd54f681b5be6a4550e6e9f337d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fdc802dc0a05670d4f0c6b5f5f404f75b0eb10365cff7b5d3ab6f320fbd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab00de346192be52607eac780fc82b5aedd68e43450e44b8e31af1edf23faa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105021 Malicious code in late_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592625e8b09615e807b9d48c5ff3a0e361913cf9fffa050e810c47c939c3ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_meadowlark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5003a85a5799b57de840d088acf8cfb036b91c6957fd1ff97f771db58523f287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-sroto48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea53f77d87fa42099b092f7785080760a559ded64c5917a0a6b90176608ac1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-kentang7-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521000113661d6f6c018ad6fb756b85c8237386516e04947e5a66bd28cf66d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-gepuk61-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045527ec81c920d7a237029d73f3f2fcccf135a4d9376707e7949cd22585a63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98053 Malicious code in lina-ketoprak82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d6f0a4f7ca3b957314e1e74cdb730a91f79694b6bbd82b9bf11e4e1f0a033f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_peach_angelfish-93-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0096d0c730c9b77473ac5c33a76256580aef6ede2ef6332068e81b57238b9767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95878 Malicious code in persistent_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5c7d06374a816b15d135d82a8bc7125c865250b8cfe556325e881a90db9a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a25e69a0dcd6fff0b6f64f94ddfb7609e7ffc0eb022c814cc162180ba21b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...