MAL-2025-117269 Malicious code in surya-kentang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6a171df397020cc471887533ac76924207dfbc6d3117b09fc82b7f5950c1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116068 Malicious code in nuclear_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e4a8abf04fd88951dfda384cbc5650480f089616531b0f0132f0edc6932ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112558 Malicious code in ade-semur30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a06c3c7ecfb0d5ab130f9924bcff8bbc522871a768f3f828972015da36ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_quail_white-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6085bbfee70ecfdb2261c938c51c9e6e9a484833621689b29a6068fc07564164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few_ox_fuchsia-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010b6b8e9da2794fbbf7c5ffb868eb93def9e759310026724bec71ca7a5aace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112109 Malicious code in modern_dragon_tan-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2161bc804a62d664b4da93a10a2b2acda43f6209f6f169030ecf5f771b3605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_crocodile_turquoise-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34da5cfc77416fc1434642249dab09c50a442406e9277bc660ef673eecfc17fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112367 Malicious code in successive_wildebeest_teal-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a25a61ea99b3470066b094387434b06a6107e7a0ca1976f82dd792472f76a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_leopard_coral-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7387cb512eac4397b63fab4db219c4996e48c9a82b814404a0e15ee4eaa636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112174 Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111783 Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zwctzz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c509eaee301353b4b877e383c2a3a533dc4d74bec7265dd649eb2af326e4ffe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cvrtkr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5806f741947c06a3e49ed0739177e5b45556af6f3ca117171665ea8705f05a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b95cb2436256624efe377a48b49b19eaa9684a06bece6045bf44693b0842c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e34f364ad91a1a39f97ee9f8ff032c2e6b28ec2bdfa29af0e575f638934ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...