MAL-2025-114573 Malicious code in hard_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d13e647b379eaa77df67638c2be208adca6743a9c70956ddea8e68d553e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113371 Malicious code in dewi-sambel74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893a2f9ee6ce7a2e8cecd6313d1e1a15466b69473a55553f2397d1d057cb0b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-tahutek11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36502126e65d8e0769473b2ecb88339dd15f9245442581a4f8e230609e3301ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114104 Malicious code in funny_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98034728c7bb35bf14423886f56f79c35e2420f6d91e1bd6a21e94acd0844a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9806c5e3b1c05b4d0b0dbdc162798d1c21f3e0b6846d860ffa07ae670d7fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b4486075440c4a7505c80dcba1f8e6b6aaf107d7dedd382386b15d1f617d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ecdb73dc88dbede398f6fcc1ead1d85c9c1f8f371cf5cb1f23eea68dcba36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f946fd9a2857ee8fdcae30201093192446815da3f42d3b5099c4afe0da2d61bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cc5a3bed029157d9600a7c477c40d0cfb05b1e60566bbf60f9ae1e46a38fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_crayfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ef53705738d188192cd9bbd97a07c14349a33ef6bcff021410e456c7a15df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108868 Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106993 Malicious code in paul-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb925b387e73ce7131594bfb2131dd4b4eeab2003120c31320beb253990605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104297 Malicious code in intelligent_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f356dd9cc7ba3f9351064d371776acf7119b684855f5444109078ab58d3350b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bff6f5a0ab7f0a3b3bc2c037005faf61509c63cb1a9123241ecb5adf2eacecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c22282b515427137349d449cec6f544a6407a3812717fdd7948b9025d624991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99575 Malicious code in arif-miemee51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda967990dda88d696ec375fcfca353703f2c7075f81cc8438ad7027fe8dcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-nasi68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b155c7e4928d50c2c41990be1943db8c309b5523a75d837653eb4237fbb94d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-sego85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a949066fc1af19f65c40c1ec097c87b4e0f7e06e0d3eeec02379930b8e0e6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...