MAL-2025-118308 Malicious code in yelping_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77ac6e93fa2cd060b91502b34bd40bc94d530d0416b63bfb226c47458fd1823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114192 Malicious code in gilang-kripik12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f260ccbd36fb71f43298034e6d6d0b60328f17addf4851a31e5c077195b267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117895 Malicious code in vina-jus10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5139d3e7ffc59751bddc193b4bdf752dc4c95142ef8188c5f9af4e123b551b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112573 Malicious code in aesthetic_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75202813f6f16fd3b0e2d5e8dff8b42c040cfeaa0d3dde8a5f030b14bd5bbae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115967 Malicious code in nana-rawon87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3f8fb426dbc1e863df8472a6b93b86badde1fd182fd730e4175be338ba58d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_deer_teal-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62918de0fbd144ef3982412581117db27b125e0153bb66f1575d9208c1f32609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111948 Malicious code in glorious_frog_green-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96508623f39035fdbb4626dd3484f4158a2daf41a705a9b55a7c5499fc165b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112492 Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111768 Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111953 Malicious code in gradual_ox_magenta-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b67f959bf52f9a1d099159c7fec62515c687ae1b9c0ebd43bbaff2f09de4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_rook-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf6c7627a1ec20e21d610d0de36a712b9c8ffbf995fe155689669a40e0ee27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...