MAL-2025-114458 Malicious code in hadianto-ketan98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e7d6a6e0c37115302bd50d95dcc65d81830ef38dc8d8d6372115afce53d926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116149 Malicious code in ocha-naget69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d287499ee96ca9c454ae3f4b7b19dea81d16bb95a2de085f65d9d56dd41258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112375 Malicious code in sure_wren_copper-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a488b5e2b4e61352fe71635c52fe1cd4b721693acf76b4a9444174f0a8f24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_worm_aquamarine-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16261f0ee471a3bd1732609e5b854661a46a60253ea8d0687ebd9ddb2181ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_dormouse_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6887f08de9725f3b24b876d33bd321821c1a4204fec7f5d5cc9ea09c53cc7139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_hippopotamus_orange-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e663c99b0accdfa7a6401cbb4ba94280dc1bf52fb68e5d9f4f15ab1f0e83ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_zebra_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7afd9cd69208f6ad3925a63a3dfa39b73a4b0977fed185848faf95cb66428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_canidae_gray-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e61282c538d1eb6fd3b95cb698679e5e659d3e744e9e52fe8fdcc5622237b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_kangaroo_olive-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92535e5084d8b9f297b29cbb162d1c112354ec830dd26316384463e500b76e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112196 Malicious code in possible_bass_moccasin-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccb168a836db634f54e941d3752cc103240499dd5c37601eabf2c9d303f3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112222 Malicious code in psychological_chicken_violet-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe8a687dfc486e523cfd66eb4f0ea4fbf0213c285de8b3fbe2cff81fed91d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111793 Malicious code in delightful_roundworm_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9357384c4fabcaf0d1cbf51c4d1f022a63d0e8f9317e1f8813a9c0d6e497a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112041 Malicious code in jealous_jackal_green-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9a85bc05b9dc8219a9f1bee1de6442a7330f64c79daf3dd8f65eceecabf853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111838 Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...