MAL-2025-117554 Malicious code in tuti-mangut80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea49921cd9634492d7d2757554f186f2a802f69b80f263f46a6ca976e4c5a2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117157 Malicious code in smart_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e033e5959b4766ba06ceb7288893d273e59931634f70e2ec00d0fcbe9f4a787e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113975 Malicious code in federal_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c808b7502a6e9e9d279ed50efd9ab6c35437d6d479a73567042b173fbb226725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113629 Malicious code in electronic_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029fe72949130ae94e9822aca9860b94c41a19f9005b1508e191399f9aaabce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117471 Malicious code in tomi-jus95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f19ba9b163da7e4b8d8b73b1d649cff76c3cef22edc8bc600ab32a228002670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111961 Malicious code in handicapped_whippet_tomato-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5312a143a2874ce99bda8b40cc47890b3505c2412fb8a4496e6ad464495c4a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_macaw_white-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2d5e163080ae481f0df366c70c5757d7283a2aba5e88685ff8e1bb0ec48bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112024 Malicious code in intact_gull_jade-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca410ea87a727dd55a56a3b97d7462bf330a087df10a44dc95e4603641fe148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_chipmunk_brown-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89de7454c8004e40c72d975a46dfc2e9b51df4bcf829c0dc9899a8759902f100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_mink_violet-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01b3281bca965831b272175f2b63f365c2630809a3175f250971c1e1c807601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_hawk-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668ba7c8e3fd0183191a1df73d9ffea1642f7e8627673871652415fd7e16732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109099 Malicious code in steady_ant-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486002550ad14ac0f5271d965b43b57916563a8ec995d91c79e664f8319018a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102273 Malicious code in evana-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1fd4368fc4c78eded8f350ef2daadbfd31ec3b0a97a2eed4ce05ba19098ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110174 Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_caterpillar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea51fa40838fdaa724d58e310be82239f89babeeaa9d3134ed643856cab96a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_loon_beige-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e826bb67c764bfe2bc671a7daf176860b0bb1632b8f18be4cbc584545a1275c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108421 Malicious code in scattered_deer_beige-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae98f2f41db2a700a50285d122024b98b93964c65a640dea92ecd97365d530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111358 Malicious code in yucky_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99ac1dc4ef13babef30c1178fd602ffa61582b22b005eacb4d826b2d649f32f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da81a3a7fc7d68808742a198a978a4fc74384ad8fa5604913a05db0a7813eb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daade7be5c65a5ea13496e1879657d30516522f78a2d8fda778db75bab87fc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...