MAL-2025-114830 Malicious code in interim_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a979d168020ac30c4606f5225e3b8a85f1db29d18fe5d3cccbb77012b544434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112767 Malicious code in bambang-enting1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197e8b5189f6100f1bdd2725854eeb02a10a70d0ff17d129b3c440270724eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117650 Malicious code in umi-rangi73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b03f127b5e799cbaf4292f0a31dcba60868f338f69328aea2037529d99f4079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_guppy_brown-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a0b219b49958b23efb83509091da1d579f28ae12154d70c192330b1190f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_armadillo_bronze-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0631d6afb0be8ae664400e40cd94ac799833ab6ddd259bbc61bdebe9b08345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_guan_aqua-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5a0919a858575de3560f0166cdfd792f7d5e40ad2c32e5a65f969120bca8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_booby_salmon-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eec6afff539bf37b6d8bd9a17ad995ba42abe34645522c08eb697a314ede57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112359 Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111720 Malicious code in chosen_beaver_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce8e19445af07c5b051f7090b14453025d7e79377e2fb44037831ed9b326f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_asp_ivory-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45725ac2914a1a152760b84f4122dff4b1148c941f6b8dfe661afb5a72fa8680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112491 Malicious code in ytterbic_anaconda_red-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3a777a779c28798c0cf8c7b34e21b007c216da4025a072fde2b5270a2c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112265 Malicious code in robust_ladybug_aquamarine-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e36eb0d3b6bc451ec3283a6fecf4946990d4a9e7d6dd014dc4e2b74d514b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_dormouse-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332c0f7b1a916181ab9db4b9af01771cf4ff082521264289bc8e4bc1b5f5f537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_antelope-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd384d679f0901c9dc23c09c7285fb2e1ab4fc1234c3c22c56aac4125ded6ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...