MAL-2025-100648 Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfa5623df48b862f4b0fc12d882024caa47993fb8d1e4aa9482a076efb38950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100758 Malicious code in competitive_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2961991922e743aaf9279a295e89af245fdaaa6bf4198d6a72733d7a78d5456c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255f884d59e48aec9a92d6911622f6a480491b3c498ef408718f9ec4629c6cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worried_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c347f06a79ee9f54df178cebc100f46fd1aff7906c156eb76a8c480910bdaf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111140 Malicious code in yabbering_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4033e89a54d722f2b860d32ffa2906c676479187d9679df52e31d0911eaf1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101254 Malicious code in deep_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99d984c981fe043d52ac1bbaa6931e89736ff7b18f2ea5c16d3d63f39cb6442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103634 Malicious code in heavy_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b14639f92dc96184a10f331194562046f0fdc56bedfef590d6b72e2450f925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_blackbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022644234615922bf83756f8560231009855305c8bc8b0b760a31b837b1f956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_mite_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd023b383636e9182da298064bb0a4a41066578a35292e97b3968e141a8c61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104302 Malicious code in intelligent_spider_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f40d516d0523322788e1276d5d127b9020d5092e8a757f5eafbcbf21bbce0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ef675fb305a0d1deb8f01b426cfc0cbabeac981d8590639b63285ebff4237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bed4f47e70a6a434a2fd8078e5ec2480524ad9098ce4a2a51d560604f619c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_ermine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994dca144ea6a3aafc44fe2806618a1ce0f42fbd9e78645a44d67a0de228fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100210 Malicious code in candice-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3d714412bc135ab23f5c1bea52be6d036ef4db3fc5325d5b46db7afbd28eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab66a5dc473b11b65c09abe3a6f832b554ff4d01859f48ce7855b3dd3b74e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100531 Malicious code in citra-kue61-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9bcd351daae6ef07cea55fc4195a61f1dc59585d12b32bcf7df710147616010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110873 Malicious code in wibowo-naget70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17dd16048f0b19e6174bdfbafc654e2f688317b4c1c1d1f33cd8cc9d53ab1b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d444dae40a48dd8a97bea7e686cb7c9977023d26b2a93549944bacbc1079316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101712 Malicious code in dono-gudeg68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c7d85a6c6c2500d561ef4e968b599b05f409985f4e02a5c312f14fafb39a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...