MAL-2025-115532 Malicious code in lisa-ongol-ongol40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5915fa227deebac61814e09cbb841c9b8281da92b3986e0248621a26af76f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-klanting26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9abb00f54c4cfc1475822ddc6e84c94d29f777c93910845b7fdb6691cc3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118246 Malicious code in yanti-mendut86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230841465536c323d654f6248bf5fe9df1bad84c88090237ee082913f685b613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116184 Malicious code in ogi-mieayam39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39951d9f535bf3dea9ec61eb50955221f61e06ce6842a0049d3e0e5637bf664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1920839a17c4e9db89ed51d6640ed3949492d781205699feb3debb38b7132885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115827 Malicious code in miserable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f34b186798d15ec018b1e6254244a778abf3c0aad6623c54dd03eda7acb97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117175 Malicious code in sore_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7472ddf67df2bedb60205200dcadfe2d9a883c31c92e27690e5146c44274dfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4c2a4c0e7ac94585d81c057075261931f6819d62054495c5419b07dd010f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116333 Malicious code in painful_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620a96f605a5ff654005af3ff2608140c587c4bcb208dbc698f8f43649f11d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112350 Malicious code in spotless_dove_aquamarine-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5649f78ddaae56fb609b7c839bba1a7bc08d28888ae67162ad18bb56560e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112283 Malicious code in selective_pike_fuchsia-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa89e00a2509fa1bfc0ab0e696c826875b3f644cc35473499cf0d9cc12914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111929 Malicious code in funny_shark_gray-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72110ca0c1c40bf9df1d993e398d4f3387a9bee554b532057be34f34280c9abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_pinniped_ivory-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b3cf44c0283fbae1345353a9266a91199527545c9ba3a35e2e1469aa9f35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106858 Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_vulture-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e87242fba20320f0f7ce67c5ab7dfd7e606a924aad22d9386e24988e247f488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110610 Malicious code in vocational_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcaa95e36e04fc88cf9b332fc3f23c6a4132b7c4cd702eace503b06e7ccc1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...