MAL-2025-117613 Malicious code in umi-buburayam58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014bb3f73651034a8bae3f1ec47950c50b8ea2dec138ea48ac9223c7707a0362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116797 Malicious code in rifqi-sasag32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8957b06d4b89b7b7541a4ec015a18062b79174a9c945ef8493e219835ed9c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_capybara_crimson-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f9024b7dc31552755750dc682027521915e6afc6f027bb82698631b26ffd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair_cow_bronze-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d4ffec3f43a4a4e08924534c42a8fbd2a34bb872bc80d34db12a1c821c048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_orangutan_jade-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5f3cddbfb26f09c48547be6aab60f2edb5be24268b470dadb0903cb095ce6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_roundworm_ivory-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb583b45989f3dc17aa9174d75f88bac8db3a6518c082160da8252b339a6244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_cardinal_coffee-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d004a3a8c298c191e6f6163d74774e39949c807053b57ff508eea0e81fc3fb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_yak_yellow-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60c2d9c8cf0ce6513079aecbe9aa41b11462d0f91e8cda9b7863f9af14a1d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_raccoon_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bce1e7f57219b32c4293f253ef3bab6c37345d9cf36c7db6e59cc474fa6e6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft_cicada_harlequin-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304655ae80864f227dcbb2d094d4b0279495a9990fca6b65af7bef2c2ae9b1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_mastodon_moccasin-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c20ae5a29f0c8971143df10694a4562feb65863290de64df985a444db540cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_orca_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f56877d60475f2e16c3e6683a89dcf90b825c68b6cbfc1b11e56b6b0e2c23cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_ostrich_maroon-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99e6fcfc9c1b2bdc248a65b2190f652a7affa048eb26ad05d3c26018f967935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hoverfly_plum-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138e4760625e9c7196231528feb3d0cd6eebc18cc3d61035434b17ec012680c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_ferret_fuchsia-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1974a7373c1f263276e645c9ab34a393e824cd4a872a8f0cc6952a0bdeb3d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robust_condor_azure-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69f953c333a9e6fabdd07de32bba4703d59b28b0a72cb60a319caaebebbafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...