MAL-2025-109241 Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108648 Malicious code in shugll-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e6f12b28bfaf9eafaa83e32c895b362bfe8e6828485eff37b2928b2dbfb790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102352 Malicious code in exclusive_peafowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52089dc9c17b6585081885cbade286b0c02358a37ad72fffe1bb4a83e976ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104425 Malicious code in irrelevant_guan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cca3f86f3e3f5cb01d95c78b014b874b39060b7acbe230205a8a12b9febb606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107670 Malicious code in quintessential_ptarmigan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76930c06f021a1567bc966527d595b9a10950688697c345c5c6b75801e1233c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109957 Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_frog_magenta-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7bbe7197b7ae454a4f8d2f7c865caa9d918f9e8b70ee1d7be2238835f44f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101692 Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110332 Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110563 Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_felidae_orange-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bf4912daff75be009d406e7b5244fe4982a37935978f77bc19640e850c812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_louse_blue-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c031450ce82cbb47514fd3604ddecc59f90a389f473468561be4f53c8463ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_catshark_black-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0cc64c2fb374f41f266e299e1de998f0f2a3594fe123b002e977e39906769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_junglefowl_amaranth-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c3633cda3984970e983377123dfeeaae1d510d9b9589a6dbce2f217735e21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_camel_tomato-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b4c9b3f2c1a234ae5f7c1c0825cc6bcf1017f110b3e8e80d8742821a1564bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107202 Malicious code in pregnant_mink_crimson-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514f1988c54af6f01537c2e6ce03a09d805f0802b1ac4175640720bdc78286e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_sailfish_plum-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3162b7e997616d5075209bee5c8b20c0ee6b4b3ecb67807f2f3fb20b59a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...