MAL-2025-113767 Malicious code in exciting_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aadb77d32d3c63cea785f6c06d6967824bbad37030e024db0f412775ff4829e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117936 Malicious code in vocational_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e917710ae4952044da0ae906e9b51c9858c8e2cc3e3839599ffd7fbb6ab038a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116558 Malicious code in putri-lodeh12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a380748305829a37237c8cea34ccadfc6b42bde78e789269d0df08b704db217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116617 Malicious code in qori-getas95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f083030b4b8554f9417accf4161b0c34fdb84077ae98fdf1668e025c76e84c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112713 Malicious code in arif-rangi40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7bcb24c25297dd8806074864f930861ddb74ca896271c49a710827cddd3131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_deer_teal-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62918de0fbd144ef3982412581117db27b125e0153bb66f1575d9208c1f32609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111768 Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112492 Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111948 Malicious code in glorious_frog_green-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96508623f39035fdbb4626dd3484f4158a2daf41a705a9b55a7c5499fc165b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111953 Malicious code in gradual_ox_magenta-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b67f959bf52f9a1d099159c7fec62515c687ae1b9c0ebd43bbaff2f09de4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...