MAL-2025-116841 Malicious code in rina-peyek37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c25882df2a1cb37ef913c2382f3651c167826f086234062b74ea56aaf29b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114830 Malicious code in interim_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a979d168020ac30c4606f5225e3b8a85f1db29d18fe5d3cccbb77012b544434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113801 Malicious code in fadhil-ketan21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1661b2886795bbe717ddc8db7748c0d4623c5b438238db424a5373d98f83cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_armadillo_bronze-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0631d6afb0be8ae664400e40cd94ac799833ab6ddd259bbc61bdebe9b08345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_guppy_brown-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a0b219b49958b23efb83509091da1d579f28ae12154d70c192330b1190f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_guan_aqua-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5a0919a858575de3560f0166cdfd792f7d5e40ad2c32e5a65f969120bca8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112359 Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_booby_salmon-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eec6afff539bf37b6d8bd9a17ad995ba42abe34645522c08eb697a314ede57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_asp_ivory-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45725ac2914a1a152760b84f4122dff4b1148c941f6b8dfe661afb5a72fa8680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112491 Malicious code in ytterbic_anaconda_red-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3a777a779c28798c0cf8c7b34e21b007c216da4025a072fde2b5270a2c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111720 Malicious code in chosen_beaver_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce8e19445af07c5b051f7090b14453025d7e79377e2fb44037831ed9b326f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112265 Malicious code in robust_ladybug_aquamarine-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e36eb0d3b6bc451ec3283a6fecf4946990d4a9e7d6dd014dc4e2b74d514b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100711 Malicious code in coming_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4366498e57beca3d73510bbbb01d00007b15ac1383952a7021eda4ee5c75158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...