MAL-2025-111695 Malicious code in blonde_whippet_peach-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc6ca49025869cc68618b0a93169e50b97f92cf08dab8c8191ae3d3c828e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_coral-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69993c154a0c5f719ab7aca8cb692703d1a03cf288bcbac9ab3cb870fe080e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_starfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb217c941d8b5661c99a35e1513f89440dd82c72ba61881fd47efbfc97bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99223 Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_kiwi-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9670c133109df77cd940a0270abcf16e706cd7e4897c37a929047fe0bf0e255e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18d2b4f46964c8f2bcd2dd4b4d30a4b398716d75b396dd0c6a26a6abb21374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105080 Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103800 Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99031 Malicious code in able_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14ca669678daf2926d030d13337c7b33ce140e75effa1f40cb6eb0c972fc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109577 Malicious code in thalheira-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397a9877787edfc7b4284845fcb115195be1704b953692a77e160291077247e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100986 Malicious code in cooing_kite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63469bc2ddbd5a7b96b3d91046aed8d68242b4c4af888eead984506e78b4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101879 Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5aa52e7e3682edc5987bc00cbfaa2e88ce10b9f3a2d0cfe11835019b7e34f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100891 Malicious code in constant_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57297409f023fe6ebbddfdb7b4c0ce8ad1f8973d734cb0686ee98331a9f01c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1ad880808aed9971cc1c2acdca40ea38b7f46b9a74a02345bcdfbdb665b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cb009191806296bfc55cb0898cd23c8395901640d2bf6380d5325da4db7356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102646 Malicious code in favourable_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60461f965fa3ea1411160601724706778febf2d31b688f21bb5609f3c8dd085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...