MAL-2025-116429 Malicious code in preliminary_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e499a2dc32454641dad2f339fdf3944c6a4a4ece7f3c771199177d9e26888c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bika8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e289bf9a7ea905dbac3aca1d96cff8c945081837e338d9bb14b4d2c230963a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113288 Malicious code in developed_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef36564b6fc4f63edea9c8ca224b199ce7ddf44b06fc32ab4bd67afd4d152219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-jamblang3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4924f549aa5adf52cfdbda1f3e4013d5a6946be06e75f7a1202a5246c9f674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115994 Malicious code in nervous_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdadf8221820511872cb3269c9a5e8c3f05f798babab8b0ef3905c1475188516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112666 Malicious code in andi-nasi89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aebed8d05962553f7dda97554337f96809883086576c70caff19168aff4a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_basilisk_silver-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f461b6d0a1172f9e029b96dbc074ea17bc592075d48ef012ca89a666fbf45160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111723 Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical_lamprey-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fcb8ead36aaf019543103e902294b48138ed35672f9ba4beb0f06d97798d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_bass-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ed473d5b18396a41ac8645c3d607e5b4a541c0930a1dbe1f9b6ba66f3f4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e4b732d88152b895aad85870149df9be59036a1e1e4b43d5ecc580b35b5236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e028616da646ddb18ff811b2782de9866779001ba95a77df26681f0b35e1903f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9dc41595bf23b4a276072782960789cfac1df2f8d28c285b3492c98bd2c4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108166 Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109081 Malicious code in stanton-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8e24d5177c9b6686abab5197356c6c1a4a5c3ef624b5307482e99d922a97a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb23b9fe475da2bf795c0204db0a0c9791402266a641c336c88c0fe7826776c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b739d104b872b4b147f7fbb26329a8090d115d4fe2003752b7f0cca00c8ac65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108137 Malicious code in rina-otak-otak93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed16df55da97bb04275beeb12f5cc3b61daaf31a36041a9004bd7da6bb071ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102621 Malicious code in fauzi-kue35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad8669df26979112ffa828df1a93e0ec56855ac4bb58fa42b2d469208ab119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...