MAL-2025-115667 Malicious code in mahesa-nasicampur64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593914d7667c8821a35b76c9ce5b74e33d2e521db2b40a85004b2eb14f402974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114325 Malicious code in gita-ruwet8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123363271d043a9c922e2885a16c6bea596299154d92a2f9193396e4c6575a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112364 Malicious code in stupid_mastodon_moccasin-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c20ae5a29f0c8971143df10694a4562feb65863290de64df985a444db540cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_sloth_fuchsia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c857f9fbe211695df074c58058ee9ac29e1360595331a85f75fb2887a8eba6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112150 Malicious code in open_marten_brown-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f541c5bde2ac5f446dadbf6bba0062f6e7931fb80a784ebed56feaf29b1bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_loon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9909cea40f4d0d6ea3f9b2ef218fdb768bc00f41402f960a20abe73aa2ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99200 Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern_grouse-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0426f9e9086fd1eea960a1f9f1934e204e4df5b3485204322e75e5f51718e3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_hamster-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a91980f4961c6f2dd0fdb38a23772ef8a0b6a81c741a627554e5d20dc9e2935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103824 Malicious code in huethea-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2cb3fede06ad21fa6f889823e8628134c66e3c151e8939679331f76c0ab972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aylessa-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db64229190b29427bf250d2f363317ddfc347b96df87c7704e3dbbefeea9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5770fea9fad6ef178bc6d5af87ee2cd0ba00edd72084aa1fa65347fb68aa6a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104256 Malicious code in institutional_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020bb29f8823877c6f4ef93c99e96c07be4c9fb7954e1d9daa021bdc39997378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bff9be24881006cfa2087febd95568384474f3ff56829d3c1a6fe11019a379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anastasia-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836073d07f17c5cba587284151931b480c04ef449afb1373dede59f8210ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107720 Malicious code in raspy_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dddc5e1f2b84f3c8816839c6a4130e88e1768e5f2b357a225f928f3c1e0eb466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4396dd41a23b3ca2f3942bedfd4e419e70cb7c1793e23c3b66c6de5a1f207e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_tick_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277d93bab86dbde0c87dffdac5074112bfba5d547a1947c7bc3967eefbf1dcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18b273aee65a425bc2eb43872350973eaa32c05d1aed051538099ff41968e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f001a1f4848925e1cf9fe66215b7a1173adb7caf8cb6dc28fce21eee473c083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...