MAL-2025-117001 Malicious code in secret_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c95a80a231f66c21a44fcfd821de75d30ed7df70dbd4733db88ced3df63036c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116312 Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113917 Malicious code in fauzi-dodol2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66ed7f2075bd86d831f725830461b9dd5ad704591e00409a6eee9787626a74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115527 Malicious code in lisa-mendut22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943b86644f10bc300002861ce3cb8ed4c8c3c1f5cb5df4bbf303d30d01f24b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115777 Malicious code in maya-lapis69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f00c155c9034de8772d6484a846aec7ac2d4d25d79f4c5f65f1de3c856d5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118292 Malicious code in yanti-toge21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3613ede13ce499187b0dcd2b5c5a0240d999e5c97bebf72cefb9faf0bb2df013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113602 Malicious code in eko-serabi5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19913013a6143d9ee3f4a6e7ebada6846bf9024c7f5492c876c2f916fbd4d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117911 Malicious code in vina-ruwet3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc88dc0181342dffcfb465924aab18e37c135fde8f4f353c35d4e709db722275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-toge74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0403b57d74bc15c866e73eefae21256dc692b074d682361e8b54d82e4877c200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getuk36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3b51444b958719835d640b59161f8a22811fca741be31273a3721a7b497c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_llama_purple-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208076eca32696fe87340d3596c0b028c07ad98c3a4d6b5fd6391667bbc5a1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_coral-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a2a9824d3b75c21e49930460c954baebafcfb54f41c20aa4ab09166edb49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111797 Malicious code in democratic_elk_black-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad354eaa5fdd883eeb68d78a1ede94be26d60315328fa227ae75225a22061a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...