MAL-2025-115364 Malicious code in laila-klipo62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc25da59eac42fb2383df71d1ed9822eb158c3fee4d62f5f785278919d54b397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_wildcat_silver-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256ad5424549083847c3a06af1dad17121a78629c2048a2f61efae64b841bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1c65c950441af5556d5f3cfe65da0d8cd4d6ff0de183f97d46fb940e9f3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_landfowl-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2c859a4971e7c84f29e2f5facda5ded5c6dc61bd9b98f7e0e0cd8792d10402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100665 Malicious code in colonial_canidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f8bfe24eb4d2fc336ba759c19bb2d75ee425e892b75c86968ef2384a86b8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103612 Malicious code in harsh_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49e37897d53fddf32f3c4669b60788a57e6e03a5a7d1c2a66151a9c589271b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100275 Malicious code in carsfrot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69dbcc25e94793736b4d945872b6bd7f8c3e0a6fc44077b0bdff9bd9e185391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102424 Malicious code in extra_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece104c104008e784c8f13f2b1ff7396773733396291c3771a76f63f73cf8aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108905 Malicious code in solar_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b647b41247623c4fb5ee2e37b3870b37d5bb0759c1a10c3ba3a05a0571e249a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ececb52bf9813e0a9b17d9e875b93a13997f022ae0aab5f3ff613a5d1c28d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107269 Malicious code in primitive_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24b594678a73468940d93a92acc2ed0e04a3de979ff7e959b0a0687d488f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107312 Malicious code in professional_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef376bd0b038a04e7a8b856bd643df926cceb2b948785893e6053b09478290b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110018 Malicious code in unable_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26138d30f67cc3320a62a883328cddb1c32baf71126a9888e644915543cda0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_trout_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06cb48759b3472e9e83947b27983b5afdab09ca5bb2027acd29173b415a28b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_condor_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf37fd35a64b9dc960d964d01391e3339e8d759a46d43ea01b2eb8e17a758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110228 Malicious code in urban_galliform_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb00bfd65c99455f3147c1a84c6fc9f173ee4cf1b59609ea4a83de01fd88c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c28ebcf5e233b995816842f4e571ac3418ad3efe592743e457b345e527ee9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...