MAL-2025-116300 Malicious code in olympic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e610c712621dd0ccec6350c600fd4e1129eb5d7d2e5c75a30e20215495f5bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-oblok27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487c28ba7c99a6bf1286edfc20973459ffbc75b954c8276e52ae701ad55a0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09ec872c1be666baaa30be0bc0de55a2f688a4b5ab4b8839f6e9bf82332918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-soto63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc5747ae2049b573f23cf000814dfb7599340b70010f76bd5ea5d1381984ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-empal90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8efb9d840265f063094a2feba11c1d11c697fa4b2c15a52ad7245b910695d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lepet94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0155c9e8b91bc4d9845cf2a8aa0854e4b0aabce1c043b7f4001d0d9bd717a7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115609 Malicious code in lutfi-oblok34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602c10b66694dde8f3f02a92af0fca513af60d7ae07cc63e3f95890e56cc52e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116713 Malicious code in riana-esdoger45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0115e8981c54e5fe3db59c0ee3e351bbf3a520be040dcf451720f0c44a3a6392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-peyek64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1ff7668028f0461816cac528e6e2d145e531f2a7a37bea4faad3589d866317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5984452a462fa68977b92462d51dc8cab8fb814e7c77fc32660610020b681c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113253 Malicious code in curly_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e1875c53cbb6558ce914bcb07756758f6563671b3bc2e01f9fd8cd624bdd88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_goose_olive-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa4a894811f0b115d3c5e8a06eb709dc07c4f3c5788b7a5cfc96bd36a581c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112455 Malicious code in vivid_sloth_orange-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ed3ced4da7435380dc2282cb77aca4d5ed7f43563edef27ea4d0874377586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112039 Malicious code in itchy_lemur_copper-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d6dbb72f4f4a9fe624bfaaafaeb13c6af816f47a70fc938f9a27a5d12e4930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112048 Malicious code in labour_smelt_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef190775f8338418b955a4fb4582ddf4024282e05ab0fa490e24e0ab91166d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crafab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...