MAL-2025-116734 Malicious code in riana-naget43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec1a75e90030b286022e6ab269f564e45c9d44cc3ef210204d7396a48b32ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114683 Malicious code in ida-kue65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0afc678f544c24f33ccf0dc95e5a19f580b34ce5e9f7ed8a6e52897fc7b48ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_ocelot_red-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6666ab1a876fea822d1dd932b417e25522972290488f2a615324a7536f37a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112243 Malicious code in regional_ermine_white-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503dd81eb73bf7ee86c1113e7040e199b18410b06730ccc4ae458e5289429e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jbeeec-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350b81729ea6842c05a3217f0bcd4b55d32d729f15750f5ba07581ce306f91aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa930ceca0a092e3896838adc47eeb39b7a11b1ca2181a28d35a77b11ef83a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110670 Malicious code in watery_silverfish-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7fd991c6fd93b8a440b250b4b3cc30bd21fbb3cc23394ff1d85819023274f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a544c7fdf2419006c0d0adb0c1b108b1579ad141b9df15cf9a00ce1ba0c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_bison-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5348f2293b406d19d627c8bad5cdfe5d1ca62d9b4cd7d8c25e753da4e1a8c551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108962 Malicious code in spare_meadowlark-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd7579aa5bccbafa00d81e419c879e38da0804f52b5de4c08966e7f8e01147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105752 Malicious code in mechanical_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab360a403d65c6ff03478509e9f67237046dc8cf579aaf66bc58f342b8c0379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99810 Malicious code in basic_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b72d86e745769f971a933cd450afc4e35f6428bb51530e47af7ae1acec087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105738 Malicious code in meaningful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2656ff77b449433919171d7f60833a97b7c01c7d02fdb45e6b0dbe35e6b33a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101851 Malicious code in early_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc991923e7946b03dec898d7c48f048545ac44429b89c2d84d99211de5846ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100211 Malicious code in candice-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9ccb9548af170deb50098306ab38244640425448854148b9f875a1f610573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109409 Malicious code in suspicious_bedbug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55730916f7c00ee87132f420b9bfefd91e3f42a63c6ffcb0f85fb9269b0097a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc546d16d5b81dfe5b5e25aee56a0786b30fdd9821813dae59d51207da0bc114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tomat91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc055d581a1fc0b6952d501ac827e03559c5fdfd32c17559fb712a117690383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106965 Malicious code in patria-kue52-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb858ef1c57fd718676eaf46ef42f9f8ecb8f3dbc49d3e5345054f1e9270bd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103676 Malicious code in hendra-mendut96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e1245f6838afcc566ca9f5021febd182a7825e40fa3eecb655238de758d976f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...