MAL-2025-113124 Malicious code in citra-lodeh17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af8a72d07823d7f5fe9e717c2b34917766232fa9b90f463c80a7f6654fc4035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jamblang14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e71ba72f3fdeeacc8e8c4d02d457169040a2ea9df79b9e0d727f44b838be8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_impala_pink-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d40ddbe379c47bb0c4d67f42ca72d7c1b8620af6fc4b3eb744c338379310c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112057 Malicious code in lesser_dormouse_maroon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8e630897ef315bd1fd02b39eddcd2d4ed09fdbece33be6093bb84c5543006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_nightingale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b87df0a06e957d5a6541618dd77762562aa157f49638a872696e9aaab8f442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101005 Malicious code in cooperative_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588cdd652d3cdbd999eaab21933bc2074698053abf9d3628c59b02bf7d181a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111324 Malicious code in young_viper-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d905a470780bbd194d657c28e493ccced2de24da1960f5573c1db217a36a8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e7bfcdd359b2b22b5317f8e27c214b51101314b9eafc8bbf1199df183c4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc180d7229026e2b12a55a167648695a08bdc45e08b79f93c80038e53a612a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc04eca88adfe580b54272e3382363c72bc8c92a2a883b2ff62918af1969812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1aa482eb5a9579cad48399fb1b0f18750bdc87b0a72a191161f62adf6151d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102267 Malicious code in ethnic_peafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef48b1797faf151c972982ebb46f05ef42a88f2a61d0eb59e3adfe366dfcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110986 Malicious code in wood-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c806497a89f89ad7eaf65a3dd76fb03cbf4a484230d4189816ca8d4ac1e52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110404 Malicious code in vera-papeda16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4c533e3a1255e82058e350aa019b803e631049c4f1ac0eb07327a41e1edf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98961 Malicious code in technological_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5689dd717b8d780392db5661eb36e13f236f3e7dd1bfc2e6a21fd8b6b9103c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_pig_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6384047d6ebf15cad19bdf2d6e4b300ec7eb37c2baaba063695c3a9a7d99241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb2ad1c065fa42905dc3076861a1ca49118b581378750bc0921ec4987262437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94740 Malicious code in grateful_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731691075993f5ba3a14d4f0b2ab680a17023473a911edeb5a3b2fa635f7cda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93688 Malicious code in complicated_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ba48f2e20cc544c33dfe41989e4c42bc08743db366f9acd17623d25c7e0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97054 Malicious code in tricky_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a55588e96863eb6d5da2e058129d3c1966b07cc630b50298881ce1d6328049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...