MAL-2025-113170 Malicious code in coherent_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f5f70f6607839d511611dd632deb9eef2f6ce61331f68985bc80ed234c62ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113388 Malicious code in dian-kripik88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4f412d3d501b5aafc5aefd63ba3b6a2b9f5c38b5f9a017e708b5f5d9b95dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114061 Malicious code in flying_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325ac151c9e1a9d902d5a0860bdbf436f640b8de52110dee07045b0ad62e27d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115625 Malicious code in lutfi-telur43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adbb38d05df8f4ead1713ee6e4651f7bee81ce6482774ba16034125d66fb9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117613 Malicious code in umi-buburayam58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014bb3f73651034a8bae3f1ec47950c50b8ea2dec138ea48ac9223c7707a0362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111953 Malicious code in gradual_ox_magenta-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b67f959bf52f9a1d099159c7fec62515c687ae1b9c0ebd43bbaff2f09de4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_deer_teal-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62918de0fbd144ef3982412581117db27b125e0153bb66f1575d9208c1f32609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111768 Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111948 Malicious code in glorious_frog_green-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96508623f39035fdbb4626dd3484f4158a2daf41a705a9b55a7c5499fc165b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112492 Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...