MAL-2025-117059 Malicious code in sinta-gorengan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab40fd644d4e687545a0b8af39488fc506616d0a32b26d54de51d77de29f865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111801 Malicious code in desirable_coyote_green-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab26356b5ddb5241a91961a3d803f0fc6cde498b444b3db7dd65be540c3342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_gerbil_white-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74759b7d01a2638e9a2f7a96f8bdec645acff9873eafc841354f8be35fc5e0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_flea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f37ab0729370f03cfd19708adce17ddfb4a1b5d685c459c570657e54690c404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104287 Malicious code in integrated_parrotfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbec436b375ac90bc41a917bd74ebbf27c02d28014ef4adfc5d88aa225115c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_guineafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102fb6eaf1404072cf8cddface7bebf4be53e42f0f8d2b95aaa131851a76472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109539 Malicious code in tender_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad209a0e274a67f254f7d9ae92fd686cbc75a3e68e1de1e9f17ee6faeba27ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102842 Malicious code in fmgsra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83fe61d870bb0924ba2dfa3c6a92203e7392adccd6fee1f902a7d895cf7452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_baboon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7025ffb83f9e836259f9156d4414cfd16ed52ce205ae647308c172d5952419b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_impala_blush-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b551cd664aeb068b354bbc89c29af786e5a48f85a3e42c163af73ebe24266d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_lemming_cyan-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae4a3165a7e6d79eb3aedb097835ec61b634a4cf8b352867ec413074a4d0d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103950 Malicious code in illegal_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fafbfab9def2881c9dec2810bf4973b7aef4eff3181f04cc5f5f781822ecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual_cicada_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895c08ca2c5ff9cb4c781612bbc9369b0cd91fff0778caddb22af382a4d9e0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d7c91005d04b2431ab0b30cc8d0cc9d1105e180bc2c7af00b894623bb3035a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_dog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96687ea5f6d499af5c0eccc3b11b6448dddbc8c45fbd48496025590924d5dc52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100416 Malicious code in cici-bubur66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f24f5ef2cd3ab84ef7d5e7dfc6cf9747f9a4b36ac926942f0ae9b15d6ba2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99046 Malicious code in abstract_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6889791ee09301aaea719039381e748baaa71970b0251308bb45c128b9f54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104064 Malicious code in inc_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc8edafff71af9f48a451f1ef2ad996b863eb2443ab7687b751e82708007a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...