MAL-2025-113631 Malicious code in electronic_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604278e69da5bb3ac7543753768bcab0144f8d3882b4164843cfe8e65e1439df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117977 Malicious code in wati-lutis58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0788e80358c6986e1e25d802ed71495893b938666a2405c9d1a4872d120264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118065 Malicious code in wibowo-dradag79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b97ec4a7e693ec8864baf06a7d8d765d07eadb707811010ab38929f8564a87e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_dragon_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886beac91ae9e5313e5e2ce8bca8cce554989c67d46e894d8e0243b14722dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_kangaroo_olive-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92535e5084d8b9f297b29cbb162d1c112354ec830dd26316384463e500b76e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112135 Malicious code in notable_tortoise_red-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2559e6abb8b6912db4b0ca25b8465ccb96c59a98e970d4b7569548db2a898524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_anaconda_harlequin-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db3d31271af39aa323080b6978374e058bb43b641c02a5b82f1498c8f44c68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112006 Malicious code in important_aardvark_scarlet-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0d2e16166ea55f194390bd788ad5779d816e0a7e06f959f2e0f5a7bdeba05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_mockingbird-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ef24c7d7856a2b08b186e2e139e3275d59f1318c6ffebbecf5f931e2b29ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hoxljg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d421c6b6a247d3e65b77f0618967f50d9cd3cdbf2826803f86be825d2d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7bc17f2306184cc09a600e17dd676340819a884dc46cf753a02e4c784caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hgkzrc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba9eda2010c04c284344686ba016c49e8473b45e8d2d98952683c95a7b2b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spoonbill-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6834614a225614b8a01064a589c32a3f59572673646fa47b52c798d17ab12674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casserole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf620b4f797cfe3e6bc57d0fd3a856beaabab2837cc7e24a6862845b8786aaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_landfowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674ec6e693db962daa7c2431520ee7427294454ebee1d2ac5fda1173073f1d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105367 Malicious code in lrpnue-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e645457ae640644affbfd92c8e48a3d367509116cd2e3d975922ba85223b07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110638 Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108420 Malicious code in scattered_anteater-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06edbe9b7e93a98308e80f648b201ee2c2b0a8aefaf044137f58a3807eac560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...