MAL-2025-100985 Malicious code in cooing_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7bb10e70106416e5b73d279047810d813bd019c8761333ae16f9308f971957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109361 Malicious code in surviving_gorilla_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac1a2744a5a5a5d243c3a8a8e557f57b582e89efb6bda64206998369389bc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lengko51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877d79ca239c59a3555704b669e4565d8ecc75a4e429635f9a4ef73c78cc31d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108370 Malicious code in sari-mieaceh79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab98da6bf60db8a2232ebca9745161df2b59b623e4b62e6d39aeda658a3cfae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9665c79b9c098be77fe5d5e418255b40ceb33370411df14e6c2327b5a4d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gembus35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f4d2c06b726a540750ef6ac529e6a990555d32c12481701dc59c595d349b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104507 Malicious code in jaja-lupis52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42cdb85cd314d41b49a43b82d8469fedfbf9d925c497244154af3e56494503c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41db1da873adb27d79cdf2f2e647fae5c6315c533c76e5134a73639a49caa45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93240 Malicious code in anonymous_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af81c2506d5baec64df253f430b2f314623acad167e1dfb8fc8b9dc6df80b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95188 Malicious code in large_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d598c104daabe2062b41aa75a2e96ecd59c3f4db2d2efd5cbcb59b3b3150aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95650 Malicious code in noble_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de6de1de405dcf756ca588a333d2d61fecdfef795c8aff1e74daf93d67e07c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406536a1dca1578323034ceaab14ebeebdbb76e21948a2d50f5e8b1128365c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-nasi85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd41ec0937da5b9ade76e153f5bd28355e70b4ea9d7cd07a3bc4c1144168e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83767 Malicious code in budi-soto96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d102be7c598e1e3225d642d73417b060969dec0c7c9e8087f92edcb9751e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87737 Malicious code in laila-serimuka34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342afe3bdd84e95a1cb3aca63081beddb88f38b91dc47c9fb5a6217263b6874d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83813 Malicious code in candra-kue16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5c6b2c0eef42f89b8cda2eb1f65e9343af385e2f098bf469cbfbe02537ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84759 Malicious code in dono-oncom36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a36046a89c6d380bd5eb1326de53d7137b165922dc07943b30535708228f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gaplek72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963a86600793c915eed2845bc2f1b0760a47b65e10c3ef64307d672eccb74dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sego39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d58d0eefc74972a3337f6b3372199f7e59ec3e457e5bd0b653b8200f3cf0467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86928 Malicious code in iwan-takokak40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6eadf6b2f61292596b3dda5041e9dafcf5e56ff38d22804cc274577614dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...