MAL-2025-118450 Malicious code in zaki-ragi51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c051738473b6df538738f13f7cb05df38b857dfcd172011c09dcb242de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_goldfish_tan-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cbf1d50435e7fee81c2433bc1d0029b7b2a6fda2701085687363610fea5a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_thrush-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95a25651ac4b632c63e2daa34fd8cbe332adc5bd887c9fbf640a30f1e6e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_guppy-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de40ff7899ef11b8386da46df7661715833b2ef90d0f76171fb3dfdd3061f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109963 Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108163 Malicious code in rlwqqf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee43cc2221f039243836c072a41ba87acc4d1639028c2d1cd05b69c5cd82c2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106908 Malicious code in parental_guineafowl_beige-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d13abc4aa6826ff60433d4728a3b31391742f39a7241b2dc85e8595b2f1f5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d881cae06b9be274e9b2756057eae9efa28756e9a80bcc7c76602cbf50154828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fe74b66fcde0aea5d96e81ed3757d11a4ed81045b48b503daaa3b131124e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abd90b48b594f95a3f9d2d894934335a8dfb450a2f8636148f1d3d3d8c9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109022 Malicious code in splendid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1905d0b2e83e6853527477bd779f3289d08bf0aecdd8835c1e7a176c9970f111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100684 Malicious code in coloured_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59d53f9cc32c19c6fc0506faf401540efe863ede262a6d12211b50bcb8d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180c4ad7369409f63785b8874c39268c336caef3b5d3f7ad59bf54a35e777c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d735e9eff8810a3242fbb35afe3c7c58677bc7de1b02ee135a18941b05c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blankenship-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ab9b568c6c93c9f930fecfbe4237993367051e23c58f4824138fb9b5ebeb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100139 Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103629 Malicious code in heavy_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0dbe85c01db4fddecfc3f63b96e127fd70abe4f6951f47ee4c68d0796e0c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103070 Malicious code in gay_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95971c74fe8901472b17bbd74ffab82ca6cdb784065c2af0fca9c510061da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...