MAL-2025-113069 Malicious code in cindy-gembus12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f73c2472d4337810dd394e7e47c6548bb28de1bc29e32f6270f4f0ec817988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114684 Malicious code in ida-kue72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9c6dea6b092a31bfef23e4e5745e3cedc6d6fe5bc595478e3c50f9269805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117422 Malicious code in tiara-lapis70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a31313c35259ccd41e9e9fc541cc0bc0f075b16e63e3466f59a05a8c4c16b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112920 Malicious code in brilliant_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f1744c346874c191c2601bcf508b69dee0d44332da4a0c74adc2f800c91c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ddc381770040488c82c35223e90e374d57a53aad4110ad128e00551423ae39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_crawdad_bronze-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d7136cfbb227f5c821da61581c1766fc9a72b3487004539bf1bd14da44621f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_meerkat_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cc6202c844b1ddc3aab40bf0c3724b1dbf35f6f0fb8d1deef7f78d9fd96fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_snake_brown-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323ed24d23b218d3f0e311d99dc4dbfbd4a0d64bbe6f7c1866033e0b06aabe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_squid_turquoise-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f119852ca3d901b668849fbca6c2ced5569de5584cb4a8c03ec763b2a25feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_tiglon_emerald-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c580c49249e2af6f3b24ecfe3bd0a32cf75b78b373417b418bf8c4ed6ef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_possum_bronze-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf6c2af4177cf7dd1acd4589f209c40a9cae621bc64802e334ed2c31e271674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112426 Malicious code in unique_albatross_indigo-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9661ecf12e85de57ff316b3c9aa566159628d0510fc8fe4ab9f52a37d32f1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111965 Malicious code in hard_bandicoot_crimson-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585a72d52b4d5d389e55b1a52dd55e5d7015b0be8de5a4e871e6add59f9eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111977 Malicious code in hissing_condor_aqua-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d24b4c80e846c2327ea9a52f0190edb0a3a97d30b90acd17e4c1420025dc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112047 Malicious code in key_hookworm_gold-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c993f060d2396ddb890726e38baa2eeecb2be119385b4a25196ee8ce45b932b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112366 Malicious code in subtle_monkey_maroon-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9614bd5755d2f0e8c23fd4dd3887b01f620172d16ecfb895eb14266748f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112338 Malicious code in special_slug_orange-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826c861c7d3b49ddac8ff853f6e5ab5ba46f4a5c9b2ef6e47e499b3a9d86e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_meadowlark_ivory-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68177c848536e06b484f1b18b2baf4493dbd7058b00b350ed1704ad488bf7b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...