MAL-2025-116292 Malicious code in oktafian-soto14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8b7484f1cd1de33e8ec77ec38ef42860beee1df70193634d1fd3f7954e87e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116410 Malicious code in political_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bed4b389c46920a014a091dabcba25df765e69f3c87e613b5c5054bf76e57aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117448 Malicious code in tiara-tempe30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900c19a894188c7f18d331827dfb804d8566d1935057de171732912b8c2e2a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114915 Malicious code in iwan-jamblang32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e81c3c7396ec5491c28f88a15c11ca428be54fdbb7ef92d4598828a107ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116445 Malicious code in previous_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b011596aed7aaea064a8777a66ed8a38ecbb07cded2e7145439665dc4aa3189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112940 Malicious code in budi-miebogor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b70a75b1ab3a40290e65fc0e02e13359732a039699bd197ae14768ef2d2e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_gull_amethyst-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83bc4c97c7aca2f5d460d667b7d584498b7e27b6ac4f3d5214922d99b31ef78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_yak_coffee-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_grouse_beige-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84317f00281b604fd27a41c60a1e3453221af7d6a0d1c4c2318fd83e6ab09ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_skink_violet-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b80e3cd4cb6528cf2820b9aa2996c687891ddd57641f0e7d4600ed83eef3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_ocelot_green-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea290526a3ad5abc584ea98abb5e9f98e4f7360567e215eb4da4ed373e432313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_guineafowl_brown-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885f317b187c00d027efe4e7d2a72e092f8a5a8d246552a2eaea141d1be02066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_spider_violet-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f727143b460a8942297a9aba3f7d1bd4f8a572b6321c264d53b2c92c704c7e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111798 Malicious code in democratic_lynx_bronze-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07c3b9e6f0b5497ad70775ece20ea39620e1967615875a328462a3cf4a742e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112228 Malicious code in quixotic_guineafowl_tan-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6973839786f0e106b59a7c2726eec0f023297d86db4baaf71f0d91235eee3a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111709 Malicious code in bumpy_xerinae_cyan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcbf681be54e4781717458bd162e879feb22b7c6d99524bd5caca2429a28346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112038 Malicious code in irrelevant_cheetah_violet-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dbb3b0e6d4178b84e656ed7feef54701f5a1998befa86fa6d1505bf3fc1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...