MAL-2025-111746 Malicious code in complicated_pelican_violet-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0016a6edb3450ffaf2e7e51261548c02e8a9796167c5357d117fb0f64515f3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_panther-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c391c4be3265f9af26e5f4fd9d88756012c9b9ecdbcf625fcb4191a86bfc7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dtvomu-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c29fe808c81aed0e2f3c907caf48008bfe20b7b8f91a6258c908bafbbbbf937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103298 Malicious code in golden_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9a2cfe217a93889d90c1c5185b5647e57c9baac9ad036aa2232ed174c9bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emetrius-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f85205e3bccc0e6f8908a9333ed20863d22f13f683261c1136def34f42db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188cc11305d8b9c89d8c7fe8cdb74d8eb12090a961dc315453a466ab54480bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_guppy-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de40ff7899ef11b8386da46df7661715833b2ef90d0f76171fb3dfdd3061f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d184567979ce47fa0a8a27d0e5c59c6692d948a8a91567c147185a921251467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8b67ea2e0ad8df25e98a8d72996e9b3eead54d99136cfd532a68387c4cc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101795 Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104184 Malicious code in influential_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393222c20669351df989c4ddfde564f76322b8c28285e7549dbcfe583b2ab83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_pigeon_turquoise-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34508951d2e0a3a5ae6576703acbd9210cbca204764d4128a2d39673ab6b9051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111025 Malicious code in worthwhile_lion_pink-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd09a0b2ba8945013f3acd25a891695c7a1f7832dc50a8a29b6fe5f745df1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa4c8c1c75fbb6d78b6ff36ebe3d330ae03debc4978f8639cfb7c99a5d3c9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652e75a3f527e46e53acc6825770cfdf69176a2995462d7f61fbd9b487f993b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59d53f9cc32c19c6fc0506faf401540efe863ede262a6d12211b50bcb8d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ffc51b174685a969f386fe655b83a6c6edbeafbf5a9864cea18e1a0c51563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110433 Malicious code in verbal_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676184774de5ba23e281ce1b8af43d5bd0a1230ffae05bef7c42982e4f6548c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107993 Malicious code in retired_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76552ca8255a9f5f8110a67f9abd0a83d22fa6de8c1ccccc9e43c08a4352af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...