MAL-2025-114557 Malicious code in hanafi-semur56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad8b4b71572e6b5a33db2ecd601a7b68c4221d838778b087b486de6976f521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116350 Malicious code in patria-bika93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699710b77dabe5d44774a5f1b4ed4910052713287599b4d7ad60528c7e9278b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114941 Malicious code in iwan-soto1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4347a3fad48610e37e46ff944b97c7db6b86a0eac752de4d9135e83825193725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115127 Malicious code in joni-taiwan29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0951f219ecef4136f95d57855bd8c20c5087f22748577195730118912bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_swordfish_blue-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c068a3b8a7d7ddd68905fed79e111d5cf5c82dd67d406531a17abd662902e3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_goldfish_maroon-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc02e06c9b109b60fb34ff58b4ead0b15a545e7deac4ed15e6b128643e9833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_python_chocolate-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee78c995339138ef16f17c91857cf04ae02c7538a9215e8aab2b74a069b2631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112096 Malicious code in minor_cicada_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac597d4cbef2eb1f28302822c88d3f49201d0bb52d7e62f5e1dcb674529e6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111918 Malicious code in foreign_coral_gold-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac292a115d9068edd190e8de041e5beca9c7ffab77c2e42752345a85b8b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111920 Malicious code in frantic_parakeet_brown-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98565198e11e726621b7610dd4b2508f7cbe4a3d2408f8257d9f8b594a2fcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111954 Malicious code in gradual_pheasant_chocolate-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acb312d7eb93fedadf666dd74dca09a87c74d7ee6661da309a2f6d227ab343a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_orangutan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57592d92768005f7feca40ea27e7d709411e7de445e88fff1d16c1d267f04764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef27171efadd501272e1b5908110f1108a0e6e7a80282e9d251330a7c04bac98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ncsfhel-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2d2d7b461cd71b4120ccdc8b17d83488cc25782a9684bd9ff46a3cb8e4fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593448aa452e5e879aa598fb94439d10c159f4ccc32d414e113012c5bdfa8902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...