MAL-2025-104200 Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107402 Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103717 Malicious code in hilarious_marmoset-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c26df3b54aed5c3010d0594a83d898e9e0761b5a455797eb2693f7a13b4e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104088 Malicious code in incredible_caribou-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78d801db9fdb93c75bc1063949c41711850034defa575aaf4cd9acf1e5cfbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103062 Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109591 Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108064 Malicious code in ridiculous_crane_copper-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4775dcd937521216de19ca14822c0f9a4450f177a8876c384428c3d0d3c8651f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110366 Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101064 Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533f0cacc25849614a3e5bbee87a4e6345d516807bc3ea9d4c726d3e72ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4c098911e00ffe57883d71bb08bc7c96aa0978fc93261645dc85796140023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef5ef9833e7a6d8b146ebbdc57fe59d66b720a0b1c626c84cb97a065441dc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6295ffd3a326e114af8bd5a826aa6d7f930ea18eda7199e0fb84d3cc544b7044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a973b64b4d257e3fe111dc69878087e09efbeba20f46cbbbf41f943b0b4228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100970 Malicious code in conventional_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e29b705c89ac71da4f950997e83e607fec817731f35f806385d523f8333dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99680 Malicious code in average_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e822888035b87292da5886923670650598a596e600e19760a1b6aa4114e3b5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...