MAL-2025-134864 Malicious code in kresna-dodol9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3018aa6266854301c5c66b076e26a535f7c21e1dd078d31b15c290148710137c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135659 Malicious code in mute_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2671e03d158aa9f870e0c942ab3c7bb5290607809d0cc2c082bab79599d15af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133493 Malicious code in fine_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c92cabc72bb680d5f6d9b098c8a3a2120c5ee1f32f7921802b3b1ffae6f728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-naget30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e95515c293d71c8c8846b8de25029ecea9adbd8a4fd16116b4d4e06b9b958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124979 Malicious code in applicable_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e3ccf01d8ca7812d7e822964626033ec579e236ff864e071de137fd40ce4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130654 Malicious code in tomi-tahu35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289b6fcf1f3d88d2d7cf665bc09c2ca6e03bcb8fdb1727d754daee5fe4cf5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab275d18226726ca7f182150882f32f8216b182d5ae2c1cd0bc1bdde9051d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gandul81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68b8c8a07c67e92ae601174310bac4cea2dfddcbb690ac090bf847419474b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lodeh49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db87ed4dc29fa7b138cf2697ec99a1aefabb99751fddc68f521d832401ade950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9224240e5129ed537681c8b4513867bbc4b6461ae3295ab69334db3ea7c1dc54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-saguer30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4b18158806b961e20739d2ff345bdbc58614bb1f5edc4217d8997aba11fc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113740 Malicious code in established_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd343e48816a5ec3dc34c83f235c51fe05775d12b5ae3e7b20753fb1aa34879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114180 Malicious code in gilang-buburayam38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbef87611d00309a19982b3cb83aa0feec7407c3a57b304a627c51c5b35f7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114367 Malicious code in governing_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bbe717edcfec2b8833573588e668aef45cf9038d52e8a0511f005d4f0fbe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc39d83e72b7b30d3a2a2a743e2ff4cb54a9740b96ff55cfabf40bf3850fde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a214f1f8468fa84e0757709c80f1ff527c0fdf1a54b687ffccb8facdb3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_marmot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53d5664a8c6cf78a1356b5a065d3d3ef2ca9240d184de6a118f69d457689c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_spider-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359563804603c1aa4a59806fa21a454c7d1a6753c3213382cf99e3bbad31e036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99536 Malicious code in arbitrary_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4a2ba0e12efd96824829735cd7b22c6020d6d01623c8254ef917d03e2f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...