MAL-2025-109572 Malicious code in testy_salamander-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935b2c46e8c183205a2ec07054ce8ec6ac6f452d01e90784b55977c9d406a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19f8545e199b4bbf351320a5bf4241a8a3958a5dd4300533c939788a8eac7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108891 Malicious code in social_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf692dfb1b6c534ab3b39ebe4ae5a58b5f1867dd98ee9453507931b099f21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100083 Malicious code in brave_booby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1afd2e04705548b79b3516eda579e04bd49f9d54fac21a43ca78ff2450e3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106732 Malicious code in only_kangaroo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17724f3a9399641dca22d3234045ed1f7aba815b244c0f9aa9677a06318f900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100881 Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109070 Malicious code in standard_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef5f492c09c52946bb221296502381f64fbd761cb76bb2b7de5233024aefaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104226 Malicious code in inner_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d2bb849fc8ea383ba81a98467621c2079918c8111ba2b4e30625240e826703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107628 Malicious code in quaint_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0532b907c9e0626738d9ef4cd3f70873b956d60592dc408f56feb9f519efe6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108976 Malicious code in spatial_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6612ac0326cf37b366037dd966516ecea9ee87fdd4707f7dc9f27bbcf0e186f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100981 Malicious code in convincing_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667f6faa3f24b58feb6009524c6557f8e37ac558801e63b0e617683626d563d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667d9c9dacca658e78147856493a9c4c59d159667853424e4bacb1e883f03361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b62125490f11ca85d763b706b52517e731c8c328ea0871cf9523f837c724d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead71dc3184b9bc0878d21ba2655646f3cda3995aad211ac6adf052f14cdfb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9700e32d036b4e5752458218d2b963b3e95174f138a943ab48020233ab85be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...