MAL-2025-114908 Malicious code in iwan-bubur7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1a002da30e480fb38d5334813d1d31370c377cfe57926ef4535c194156c7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116433 Malicious code in present_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2080620396ad73f68c5b97435d25d5016087393fdd5a16acaf227eaacf842395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118099 Malicious code in wibowo-tomat31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e633dcf5feda79eb9e40a26e058db6fae3ad97023652b11f85a262b1cbebcd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-dradag50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904a45625f766a95d5d26a2a5800d325b4afadeafc4034d21f7c30ee5efd1da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114809 Malicious code in inherent_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2124afcf6310b7fa950e83c18923fe681f960041fd750907053cce1fc12183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113009 Malicious code in cheap_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3924069f0264fd3a14ab68fc34c28de6374f0c23570518b7355310b7892ef6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few_ox_fuchsia-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010b6b8e9da2794fbbf7c5ffb868eb93def9e759310026724bec71ca7a5aace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_quail_white-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6085bbfee70ecfdb2261c938c51c9e6e9a484833621689b29a6068fc07564164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112109 Malicious code in modern_dragon_tan-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2161bc804a62d664b4da93a10a2b2acda43f6209f6f169030ecf5f771b3605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_crocodile_turquoise-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34da5cfc77416fc1434642249dab09c50a442406e9277bc660ef673eecfc17fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_leopard_coral-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7387cb512eac4397b63fab4db219c4996e48c9a82b814404a0e15ee4eaa636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112174 Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112367 Malicious code in successive_wildebeest_teal-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a25a61ea99b3470066b094387434b06a6107e7a0ca1976f82dd792472f76a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111783 Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100936 Malicious code in continued_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c36ac2fd9ba2e0d6ac9057f6198334a07727b45c5a67785cd9a2e016c14dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99720 Malicious code in awkward_nightingale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4bdf3173bff7242928e9f93ed65d8be23d532e436bee4b3ae7aa2eff99033d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3697ace19e8a0df36653086d375e7bd806f196c27d273d6a77b3cab290e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...