MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99875 Malicious code in beautiful_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf72fb7258f3ca98202f0a6a04b0647a4fe6457a8a036cde296324c0b5be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109018 Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102393 Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109718 Malicious code in tjfbkd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da247256e8f6c3e541de8b1ad021adc8341da954d739e61336be0504b8330e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105670 Malicious code in mature_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb624f4f0a12de65351358f6f4d64f8b71095c5dab4e0ef831af5b7d84257ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_ostrich_amber-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea47015799e97aac924e70fc902efd3225bd804384cd4a421a142fa202ee818c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100889 Malicious code in constant_peacock_emerald-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ee0a0d9c8c2847ba98f2c7cfe72f66a973abc50b9425dec71962bb81a916f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0942ecc8fa3e7ef147891fe3ff93b768fb7db5598b1860cf61569d1628b0db1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f02c336e060ad839ca0a64b3fb1cd7374e7247b48d720e58573504fd131a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549afaafb0ebdcd03341c467d24e7ce42571fb8dce9a3c2e6cb37af54c8bf9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c192c151693d7f67021bfe4ec73e6c4d18927d1b1b0c8fb11c75136663fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4096f5134eee4db5fa72008786b39c9d7a8c687db2e13d7d1f490a65c055832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676184774de5ba23e281ce1b8af43d5bd0a1230ffae05bef7c42982e4f6548c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfac92284a80fa885e6409d52af79e00dad8c84ae14ced05cbd3cf5ffc4a987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5daa3c0fb450b54fe580b4f4ea7910e42246fcfcace9aabc7e36f5a8d370943f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025c0810ecd754d6df5667818740f82b299cf88cceeb11cb0c2caa44857ff8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...