MAL-2025-88978 Malicious code in ocha-gandul3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110f626011513614b26fc1aa106af80ca469daee3546070b4facea71ac657c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91635 Malicious code in utomo-sate4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4cde09c5a5e48453c247ca5ea2a954e85634bd266ded4870b9fac37d657266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84819 Malicious code in early_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a24e7cb0c79f31d9fdc76d2add2f22d90d61dbdc8c6077d821b9994d0dfc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-soto10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddd2e379b458c36113b4e2c0f6077eb058d23d4e940fe3419f35ab1ead46709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79662 Malicious code in lina-rangi41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656a5e1324dd73668a1d8aefeca77142b5b77212a2b0295aeba55b21463394f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73042 Malicious code in galih-miemee34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8da3311772965ac6b2ed5d9551e3b66f88ababb96e1452d75cb79539f9f73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72541 Malicious code in dian-lupis100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88abdeb799a6d1fc2d935793cc3e8857e6fe91f32bb038230df245557554fbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-violet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a16b002816f55f149b7f8cb4c9dd3b79f347b05387e7e5f6599961de1a183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managing-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28afcb7fdaf29bfcc8622c6c9e924436dbdf028325484b2265f4345c5f457d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71777 Malicious code in zesty-azure-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa28e6e9f65c1e3b9542198c8bb881f7bc8e191c136fefe0899ff37e91a8f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69156 Malicious code in likely-rose-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc2f663aebc7843bdb216108249a9ea241ddd81747759535160e2236e0e088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mieayam73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c06073d844edc407a38a64298993e1ec0ca02068d005ed64a70025e3acf215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cdf526fa56b65c4717f95e4355f7d7da6912121f38744b19a6a21599957d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66513 Malicious code in zul-klipo51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9497f8e700c489adba39737065f90f41964e3b905b43404bbf88294006e05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392090a2791c29369927f18d6992c40e3de836b608df1231e3c0a98517608d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55041 Malicious code in academic_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486e16e8ce7316b7bb8624bf90e1dfe91db5f59c0dffdb4a7b2056cdfbe138a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56479 Malicious code in gilang-tongseng89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d87c2a621698a78fc535418eb6a1b870347c5e1e7d13df35bdd69276964fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54130 Malicious code in patria-kue23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10758b088e46ca596e07777246679b99333f6690bcfe0ad4a62e6725adcd1da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...