MAL-2025-116563 Malicious code in putri-mangga19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2006bac18c8d87faaccf45e5f6f08c723973ae5245d165d1a3b550c60e83c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114133 Malicious code in galih-menjes52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f26136a861e7774f66cd2167f170a24e9f7ea59254b29210e76bfee74e0349c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117555 Malicious code in tuti-martabak8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cd4d33d95582264cf5667e2437f010daf49d67263bfa96bf0732f3324acd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_whitefish_crimson-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fc064230745436d22921618279e567de992cf50a8c5672bb296b05d2a77cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_mandrill_ivory-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420d23b3e684607e6cd4ea18ab1ccdedfe400f5564e2ce9e01aa1db38804127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_mule_ivory-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d19616e5466708a585ab1140d90ae78c2724a14067b1f661f1af7637c0b8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_swordtail_bronze-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596380b0e3340ecf7998a0de013c76aad79e8ad040756869b8b79bb2ad9d28d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_galliform_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f03b9e52fa4be9c9f0d1696a6b36a7e60b0b4fff589a4d9530c09d96e581338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111967 Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112011 Malicious code in increasing_perch_white-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402c00139c6d6467923b35938481c62b02a45719fd71589986abffd3f56abaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112291 Malicious code in sexual_goose_turquoise-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240e5164a21ce95df452cc966409f32075c83e043dd9a68d780acc2900da33dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112165 Malicious code in overall_cat_indigo-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8b1a993f75d83b8104bd198ea463e3e8e092f5157fd8f96a4c6c18acd29cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_bass_moccasin-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccb168a836db634f54e941d3752cc103240499dd5c37601eabf2c9d303f3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111940 Malicious code in gigantic_minnow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713198c620745992f508abe85b5e5a164ebbe7310aebce5b9cf7113fb74717ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112074 Malicious code in loud_seahorse_moccasin-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26569d99513b9948705b98479139734b454468fbaa4912ec06b847ea06f909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111769 Malicious code in courageous_puffin_bronze-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7dfc42a9a767037268e5f534e5e2afec90f86281a60df7987b329940185db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111790 Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_amphibian-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6081684c19463c57bad56d6a2d97a39d00316404be015b9196d45c6e8aaa8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...