MAL-2025-115122 Malicious code in joni-ronde67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc55083bc5e459540b6955aaa0a30dc8577fe1343cefc5bb35c1722ef41ffd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117251 Malicious code in supreme_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2daf0adcea88ddc2cd4779fe679f389f57f815b3df57ade77ebd43cab861f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113116 Malicious code in citra-kacang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0159187c91e19df33d93c774af2c8052e2a3949eb27011a965e2e77dec26d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_coral-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a2a9824d3b75c21e49930460c954baebafcfb54f41c20aa4ab09166edb49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_llama_purple-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208076eca32696fe87340d3596c0b028c07ad98c3a4d6b5fd6391667bbc5a1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111797 Malicious code in democratic_elk_black-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad354eaa5fdd883eeb68d78a1ede94be26d60315328fa227ae75225a22061a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111895 Malicious code in female_albatross_gold-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2c02b741d085abca30b5f07b25e1a902dfe3bcffbdf4e751928be1eeba68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102101 Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110188 Malicious code in unusual_snipe-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b02a1bef6911c7ea11a45376696b3d013340d6d65a05f4ac3fb3cb0b62b119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...