MAL-2025-114386 Malicious code in grotesque_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e895f0d4bc0e31d980c19f269861a4666ed6a8c1005d000d022fa1a7dd39d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114863 Malicious code in irma-kolak17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f7e9f1387758a6fb388ab3331cf78fe1c2830f3a472e4e24a52beeb5640e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115131 Malicious code in joyous_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f037bad1abdf3fb964a5610e84f2598f9576eeb649ffc23bfe9da23007f3385a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113166 Malicious code in coastal_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6399e28926d555b889545c7a74a370e2e2b43d5369627efd0d79655e9bf5a202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-gembus46-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abff08dd5ca4ca28384a44847394d61bcdd735709f26a622c380def6f121de74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116738 Malicious code in riana-pisang86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539585d016acfdf6d89155260461f8b53fe9071d9d2c3eacdf8eb419b2ce8a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_wombat_teal-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce118a01a7a87a5ccdb016b3f6e288b785293107afbb0103fc7e2ab3b6d7646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109554 Malicious code in terrible_gopher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7086203c6ca8e2ae4ddb69c66ed8119158c31377974631e557018fe9e21abc37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100296 Malicious code in cautious_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f7a4fc23a7bc74e79195da0340945c792a9908f0f0b9e6758e2611a34f79d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106402 Malicious code in npznxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34f047449aff215ade8104e53bc84106c744c905749413fe50e65ba0573b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104200 Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99612 Malicious code in artificial_armadillo_green-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68c77953b0d780f8fbbbbc4279bad89a63bd07f4aba6a5532506c5debf0fac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99672 Malicious code in autonomous_whale_silver-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f34fab54fc34a156613197b1cabe9637780df6fa3a09d2a239a75c22b05f787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103573 Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...