MAL-2025-116300 Malicious code in olympic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e610c712621dd0ccec6350c600fd4e1129eb5d7d2e5c75a30e20215495f5bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113064 Malicious code in cindy-dodol3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcb977b15dbb9682922df2278893384621756ccdfb87c25fca56e3d762a2303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114214 Malicious code in gilang-rangi28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875f186441209a45040172b28fc2198deee745e413dbdc07066d2c038715597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113040 Malicious code in cici-papeda27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efac90aa7bc84614d7c8fe88e6344083251f6df8e97b2033d98f3edd2754e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gulai60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd604451bfcd3bdff5d5e91ce9ec577f7781aa80e5667f3f4b77e7500ab5a298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3798e2a0d1320fb921657cf4638459031730d43aa569153727de9f6008e64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ced8ed7cc453f677d29f7c8f0a46ac371a187eddd4c810ecde7c3d6b55750e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-peyek64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1ff7668028f0461816cac528e6e2d145e531f2a7a37bea4faad3589d866317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-empal90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8efb9d840265f063094a2feba11c1d11c697fa4b2c15a52ad7245b910695d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tapai34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc73d506a7167b9833829b05e91e00169a34d13105cc6b8e2e6b478a84fdc4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-wajit78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baebbb575f10af32d2204ad6cc9f845753b80c6c4d394885d820154c950694c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_goose_olive-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa4a894811f0b115d3c5e8a06eb709dc07c4f3c5788b7a5cfc96bd36a581c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112048 Malicious code in labour_smelt_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef190775f8338418b955a4fb4582ddf4024282e05ab0fa490e24e0ab91166d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112039 Malicious code in itchy_lemur_copper-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d6dbb72f4f4a9fe624bfaaafaeb13c6af816f47a70fc938f9a27a5d12e4930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112455 Malicious code in vivid_sloth_orange-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ed3ced4da7435380dc2282cb77aca4d5ed7f43563edef27ea4d0874377586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_pigeon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5b9bb57a5ddabbecf61fc020a3aa3b88510e251262cd4a7c32e80ba325ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crafab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...