MAL-2025-116399 Malicious code in physical_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be622c4e60b6b4fee4093672527087236719b6feab6916b7223251219e78d510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115102 Malicious code in joni-keripik2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4699d02339b7301b428897638fc4217f802663465846ad9a68af309658905b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8d24d7fb88e599eb49f4b98b1f1e45e618209878fdddea17f6eae864de34ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112683 Malicious code in annual_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eef9fb71c2646b359290d5e89a1762e09c33cf1e4863c61f2827bb857d21d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112938 Malicious code in budi-mieaceh38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee40b6d1b6a59a5f318cc4702467bb5e566e1ee3c3610cb106a837db0a48c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113383 Malicious code in dian-kembang42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e241c075642125c1b84f05066eb4a711f2d1c5fb6c51020a8cce4d6b38cb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114287 Malicious code in gita-kue38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162175994a54323e8cd42c5899de50719192e94154cb8735a24524e518412d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-rangginang27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858440ddfe4d45f65b7f5dc7093464f434f97480a033241b689533bf8531d53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-liwet62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f657faa8f8dc51479e9d0cd0dd57bab6421f64dd1234ce69ca6c0ef48fd321c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117237 Malicious code in subsequent_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80df39499f3e2974a2d5a6a31aa9917ce6114f6dfe03e321291503618b45cfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105964 Malicious code in monthly_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e33728d563750fd64776902d686f1b2048fd96525b876c677bb6ba5ca815f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39a64f22386e8f177aa0cbf0b765368b123eaeb5613e29cb6261091cb0cc7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107769 Malicious code in realistic_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9598f6a80648532280d8661db2a7f3e963d405e8ef1f177b2f0ff9db12fa711e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99230 Malicious code in aesthetic_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6ecee5008aa9537d5bc54ebe94ce63d3fe61dae01dd8becd0992dcc382045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110152 Malicious code in unknown_louse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bd6a797d3729b07e9243f5492a432a01cc87f79fc6713deff259a972c09da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100025 Malicious code in bloody_wren-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740e8da3679377dbf77cd17dbe49f2aa91ac66b28ae3edcb81cd6383d1093b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105104 Malicious code in lexical_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c376cb70e23d581bd2f8682fd3cb4524114655189942ef62733231cb8adc9c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0c5d24535f94a934e4a16056819f3bc6973623c53a4ffa7e03f8a5265cdcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...