MAL-2025-109648 Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105143 Malicious code in likely_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cca6992074c307da0c018b9d6cfcb2198d0a942f03ec4679b429c98e5dd793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109621 Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107402 Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109591 Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110366 Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101064 Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108064 Malicious code in ridiculous_crane_copper-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4775dcd937521216de19ca14822c0f9a4450f177a8876c384428c3d0d3c8651f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38c04adf66c7b924c0bfc8a36255cea297e36e554ca1cdf4c7d91840a877fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6295ffd3a326e114af8bd5a826aa6d7f930ea18eda7199e0fb84d3cc544b7044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7667ed6833720b62a1c0363fc309319a5561b3b5b93b827b2f3d1c6c235ceaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e764ed5c109fc580636cbe3cbf9ba9d4fcd3643115d142936f8f8c2d37c70136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c436c94227b99c9629b669c32977474a9e0f70cebf073c097dfc7507fe7036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7217590354acf2271a190af4906614bc82d194585ca19274448d3236a62e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafd4c2a483d81d67c7c721559c00ba3ec87d286c8e05ce18b2dce57f501b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...