MAL-2025-113102 Malicious code in cindy-toge5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34daeb028e276fbbb6338e8846fd7f65b4082c455ac3199f5c58efbbb2565317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113878 Malicious code in fajar-rujak28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026cce9a4325579f5a0ff66886223100bf9f915037d9a8f144c29146faa35db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117728 Malicious code in utomo-mieaceh65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8789f4e5ab0343299bb0f8c71c04fd4ce006365a17144c574ba4257cb161e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-sroto34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e08cfe40fa2f8d32b3d39b42884e937f4262b9fd8bff65e9d2ba347d6aec871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d78e84ab253c25704295f4faa88ea288dce2f730055d159b8553ebf5d21062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasisayur42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71336853b3f35ce8401efefdcdbd9fea4d87607338a048fcfbb40776cedcf068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1488c5a5b92de4509b315da4304fa8c0296e1bc814d0b1e9fdc20bd72693238b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113189 Malicious code in comparable_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0008371454b83ccea43806665f13dede34fa8db821a15968c80e56ea7ad083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112976 Malicious code in candra-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0c9ac4f07d35551166aeffc84ac10f28d342b181ff2e3506ff85a68ebfe12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116694 Malicious code in repulsive_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e661d79e354047d94078db273c84330878e9842abe157eb166fc112713b2b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113486 Malicious code in doubtful_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587ee2e44a10ee5454196b0cfff03e42769733e3363c7442ba3673c0c63b11c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112368 Malicious code in suitable_pinniped_beige-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c7edc90f34d566e6dbdae5eac889fba3a948fdb7ea20996905c9a74088f1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cb633336d528a55a92a540f7ba793db0e5a8d17369e97c289477e227c8aa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108614 Malicious code in sharp_elephant-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0674b6d61fe34a91b46a122f9a9aba6c083020d852794d2ccdc29874147954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99355 Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105578 Malicious code in mammoth_orangutan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb2e000ae7fa58c22c32461a279781557748e0aaf10ac77c25ad6a57f06f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_emu-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1b288ebcfec1ce5c96c3b18b5d076cbd25497799f9d3fc1034ab705a6da553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...