MAL-2025-115068 Malicious code in joko-sate63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc9a747bfcdd5eb01ff74eb3f242d1e4637b74f6e9e6e36515f0c18bd3e818b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114547 Malicious code in hanafi-pisang32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793d51cf3a21a71ac54aed172098eb126966ee91eaebd4056e0f70edcadbb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117738 Malicious code in utomo-pisang13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3f931b33bb80b9dd0029fde94ddc502529cbddf5dc738a10d419fe4ad515a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114199 Malicious code in gilang-lengko47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad2b7762110db8b382e3a9a37a93db0b9e57a0ad82e724d231419b1483563ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113779 Malicious code in extended_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389b63a35b4547e3e40dd3fd4b12ac69400b879ece488d4656a79c3f25693717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_puffin_sapphire-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38ed2921a01265d9d808d4d16811a0f26725b9be8c291b74d17433c0807aab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_herring_lavender-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82c7901f2ede1f8036fd33fea813cb9ec7abf0a4b790285d45efaa9f078bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111732 Malicious code in cloudy_limpet_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c02ddafdbd5f611fbf67d082c7c31563566d326fdb85be657883f27dd15c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112042 Malicious code in juicy_dragon_peach-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fca01a76fac9b5cb81b8c46e153bf8321b7b45b767ee8e7ba39b3fb07c7dd7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112082 Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1286dd1a29fdf2886f7d658a5787d4a40da5250745539f7fd9b4a19e52528cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_limpet-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fdebfb190d1dabc6a88bc8bc95c2010bc9c2a5702ebf2873befa1ee97a24e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99247 Malicious code in aggregate_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25d15c8aae798fd9403420f7594acb611c704425712fbc543f2e2bdee11f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108548 Malicious code in sensitive_squid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5287883ff5de7903cc8b247f52473fc0ac303dedacac45e2417d44a5d80ae27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107070 Malicious code in phizeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee91ecd85660c055c415400a90e24b6819652a4b204029ba22bfdda7f0b208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104038 Malicious code in inadequate_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388615cdd579942d1fbbaf9ec2246b9f21e66c9d77729c8964b369ea2702be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99978 Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vqjvop-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218ac014be7ed9f197f64b495b6ef341585d41c327ceea1df2e19f86f5d781be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_tiglon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebcdd1f18aa3192405213093c846a717175173d90c21597d83f6c9bf5474f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...