MAL-2025-104240 Malicious code in inquisitive_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc656d32680c571742b3a9a5f41e76eb5539acadb6ef36e05018864b655972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103393 Malicious code in gross_gamefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6605e731a737824e08430407810e09f894e2dd1399797725091c6e4bc02e983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105577 Malicious code in mammoth_newt-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cc962b655953b0e8d2ff33738e37e1f9758bd95efab51c1a281a8e122fe9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99067 Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109407 Malicious code in suspicious_badger_cyan-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d8fec34ad5da01f6982217a4e23324d8b264823633adde0a234bb6b1a9529a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combined_possum_teal-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19aef31aa351f70a7fda7b95301858d46061be4f5515c37507a0a06c284d63bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_mouse_aquamarine-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f34e1839de47ab896545531fa6820e8510d3fd04d005b3719a88b93ac79475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110050 Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109322 Malicious code in supposed_gerbil_bronze-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d940f6dc2e7afa8f606dccbef59a1aaf8fc29a919ad7a39bb365fcdfe91659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a548f467639460569301775c48d02623d09287b09e7c29baa5f877cea2ce02c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3895418ef73be790543125e95b7f4f39d07e33b62e08b383ad4240114983587c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107921 Malicious code in repulsive_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9329484254b89fcec5a155d9f4f051137478b832a4d79ce1088f792081e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111257 Malicious code in yawning_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec5933338f74f45d32a25d67411d7e7c5ff41c8fc16d4ab4e018883e21e00eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd44598c128b6d6aeacd2d037fc5343959b991d8c4709d1b1a9b5be0cc1e286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106948 Malicious code in patient_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7943e5df52abf6c4e6b66ba0f9d0d1c5dd34f71d8563dc539d4313067967e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107393 Malicious code in provincial_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84ecdcc5c65be76ecb6bb38a58b124b7c6052a3a39ae84824e32da5afaf9877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106188 Malicious code in nasty_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f4ccbbd9b4149cbf2fd42072f9a7b783d5ef9f2954088673a5a8e1078f2b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...