MAL-2025-117872 Malicious code in vida-tahu63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed7d4cd0754923ecf4052b5a0f592abda439485229eb0a8c57ad3e61952510c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114790 Malicious code in indah-tempe35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475b89d578b42b245a3eb5328ac71b913c03a33d6a37dca38d1a1fcfb655f6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114540 Malicious code in hanafi-lutis18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b881f31ade646410fded22d66d3cbf60dcc8e829e3a3018d43b7b0efc59a661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117262 Malicious code in surya-bubursumsum56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa0ee2c69a3910338d6dc84514342f9ccd72162ade7241bf1ddb32919059d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112926 Malicious code in budi-donat68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056ab923cb4561e6c6827722ae2322818374dfa20da88c2ed4018c1c76cbf4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116441 Malicious code in pretty_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd2d746163bfa409395bc3606a89264d5f2ec0c31e7a965cd66055d8f8037ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115404 Malicious code in laila-wajit4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba817f336393c79542c35241136d6ede7787699cbe0f2a7a5964ea889b55009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112999 Malicious code in central_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6a5a3411d041c291be86d2848e037c992235ada8c97dbb289a98661fce55a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114743 Malicious code in increased_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86cb10286069ed3d486ab2736abdfede73aa0d22ed64eb33e26f758d4de2274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_impala_pink-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d40ddbe379c47bb0c4d67f42ca72d7c1b8620af6fc4b3eb744c338379310c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @awee1233/tehkentel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035e2114a3dde01d8795651b3e1597681379bf8aa43663b64f15835057d0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff_egret_peach-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f81c8edb9984e3634309fcbea9f65891c0e69cbeec44a34d888d1f6f20c970a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111708 Malicious code in broad_tarsier_lime-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed17210ef864438c25bd29a49aa4c268df89acef2e4956c1d13e13095251a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112488 Malicious code in yelling_jay_emerald-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d26da81fbb0207472a1f3d3d8d0520bd10a97242e0476d6bb1d57af2add367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_cockroach_coffee-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd88cf315e12c9b1aebad6cfb1ae80eac7ef4788af07ae4d0219451f6706f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112273 Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...