MAL-2025-117787 Malicious code in vera-jengkol1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0756b2a1c905dbf70093186e6ef20a1386163d512cdf1f7278564f8f203e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114990 Malicious code in jaja-ronde43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735cf3bc1a837a8109998049e3e3a309458de359ed1f359399a2f7e21d235153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114233 Malicious code in gilang-tongseng65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a37116e0dbc096b50b5e5c2c3d660423e07d9ff931ebf530115e0249a73a3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mie37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1ae5103059573b5de69656544167cfc8ca2dc292f77a9f140f3eded51489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-mie29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df99eb037a10780c843b35468a6befc26ed6697847b4f7495fe5baa72a9b23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-donat6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356d707de1f601b7c98a8c8fe82bf33f77df869d66df6bb3af19146085efd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lapis38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b46fab167a178251d5a87d524ec270fb1b3767b76cc236b91e7bcc06a09ac80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118474 Malicious code in zealous_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606433c2abb713267c3f12daf27f4cc38300c046790c68fd547db919f78715bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-mieayam79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657a45a7cd9f9bf4a4c945240aeb7177ca3c138834cfa2b344d4f083b7002ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-ketan90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25ac2821e63d398511ba3569d202f1edc8811110f2564c7c8d57896a5e00b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0c9ac4f07d35551166aeffc84ac10f28d342b181ff2e3506ff85a68ebfe12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rojak2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5553e774deab000565c71eafe3702dbfebc586994aee160313be6d8c9153e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117336 Malicious code in tania-jus82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674aee7a8f9fca9008df08f7f7ff2ff40a3a6ab2084b34ff70723abeaad36aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_sole_coffee-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b31d42fa359973e487002618b52c9516596275d2065e4a706937a59cbc161b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_mackerel_pink-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d5da517bb26b55facc01da24d8b0943e522809bb7d4992807d3e2d734a9966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111787 Malicious code in dark_quail_apricot-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0309e6febce7225fd52559c5db9311a3f2e381127af9b7d036dc9a8a4cb4607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_mammal_salmon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7ff4bcfab07bdf835ebb6689cf54dcc0a7d9f591ac66d181d683750dc7a21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560437c90c90c0053429de53def3588b25c02e5a242d2be705789cc6d756ee95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103322 Malicious code in gprrxf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0d293b6780843647b401913487ae8a4521db4b7e6db85779d35281727e2db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106903 Malicious code in parallel_tarantula-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54841da5370b8ab2c008d989f7edf32f82d82babe717bf40f595e7f434edcfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...