MAL-2025-113052 Malicious code in cici-soto56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4244c938f50fb6ddfa6e84b01de1b396730cec70d803b2e94a29acf92a5cc149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117518 Malicious code in tomi-tiwul91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29fbc6e47c9a43de9b312f011747cf70b4f3c0222c6cd2502d3b1779622caac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116487 Malicious code in putra-bubur27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b57af3ebbbef88cfcbffbadebd1535a18220a524ff778f328be104117809fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112921 Malicious code in broken_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0f92683e8b0a4326a51e9c697cc37618e33fbdcb973cb179baddf15ebd389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical_bear_brown-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7289b6f8894e10e6bddb8dd1ab890d53e8cbf82e7a53bea3cc7d85d9115df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_mule_ivory-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d19616e5466708a585ab1140d90ae78c2724a14067b1f661f1af7637c0b8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_barracuda_plum-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047f72b375e81be4cdb31a5057504b11105031527c0354087f439132d6cb8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111696 Malicious code in bloody_whitefish_red-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865e013b078ec07df4a5ef798bb0c03e3fba4f24b720a4e74d85bb10fb4a4487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial_turtle_azure-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1f16bc7a7baf79284744d7e22af19925bc788679de13b8dfb14f83e5c77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_goose_beige-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829b8a132af63b54486dc6085ccde17834b17ff6cc9611c6126d9535a856167a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112000 Malicious code in ideological_lark_chocolate-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b7deee7e6f364dcb4a4d66a8044cac24637ab235a50ba6ec0d8bc8104573f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112351 Malicious code in stable_flamingo_magenta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8958bc46eb7a35cc67f195654cb2a6ada99cbbc4ae19ea250485cff220472e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112445 Malicious code in verbal_wolf_teal-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc076accf02180ad7614a80a4f6f92b5ec8ec0c222dcbc7ddd177af5d833fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_cockroach_indigo-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a0dd115aaa992155a9cffd597810864c781bfee42c823d07285f306aed16cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112131 Malicious code in noisy_bison_amaranth-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a0f5f9c72bd597d3506e654767a293f113a0e07ecbc3113808d8d7e248e27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112307 Malicious code in silly_bedbug_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee5379b784f2e5c2041e8ce5d16e137fb6c21b74981746d9d75c31dc750d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_thrush_sapphire-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655405b05ac150be99f792839edea2f3319ee2b4518dd4f99749dfe6f39abe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless_constrictor_orange-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d6323cbc26b7234fc707f39e38ed7c8b211e6e64f11d1f90f1b9be240ecdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...