MAL-2025-113912 Malicious code in fat_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49faca67eb0dbccd1a44b2fc3b41936f0b5a07404abe6a8e0f6a5616fa505d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-papeda94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a435a53d73b08c7d0808b824a1072a3cbe8ffd19b1fb4d83423fb2f5b8a3fe71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115288 Malicious code in kurniawan-bubur34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f57c87ea02eced401e9e040d4280dea7ddd227fdbd8f30f64c1abb7fc19a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-menjes52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f26136a861e7774f66cd2167f170a24e9f7ea59254b29210e76bfee74e0349c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-sambel74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c59ed00fcbe932502e3ff997f7b7548f0572c8e87e0375b7c6e0462674126a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-lapis33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2e17d91001320637daed9df952075964f9ca6c19c00d8c5801e2fc2e980a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tempe53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e2fdc0bb163416563a46c628cd3f2a1903792c860a51381fee505b06da8189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-telur3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ebfe81318fd591a96bf66a85f32dd0fd3b28fe18bf806ed24c7874a3ed937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113851 Malicious code in fajar-kemplang12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24103d823d5979dd332da91856fd0e4e9425e5ef556fe325fef455ccf3c9aafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114036 Malicious code in fitri-serabi14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ea2d96dd3d73cb189f31b02b41764d3f0cb3b82c00fa248518e02b4568974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_anaconda_harlequin-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db3d31271af39aa323080b6978374e058bb43b641c02a5b82f1498c8f44c68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_kangaroo_olive-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92535e5084d8b9f297b29cbb162d1c112354ec830dd26316384463e500b76e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_dragon_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886beac91ae9e5313e5e2ce8bca8cce554989c67d46e894d8e0243b14722dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112006 Malicious code in important_aardvark_scarlet-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0d2e16166ea55f194390bd788ad5779d816e0a7e06f959f2e0f5a7bdeba05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112135 Malicious code in notable_tortoise_red-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2559e6abb8b6912db4b0ca25b8465ccb96c59a98e970d4b7569548db2a898524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casserole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf620b4f797cfe3e6bc57d0fd3a856beaabab2837cc7e24a6862845b8786aaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7bc17f2306184cc09a600e17dd676340819a884dc46cf753a02e4c784caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spoonbill-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6834614a225614b8a01064a589c32a3f59572673646fa47b52c798d17ab12674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...