MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103410 Malicious code in growing_kite_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ab0f026222ced597e4fb0c991def80d92ace6f5033c8ed071c203a2b81fda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107637 Malicious code in quarrelsome_earwig_white-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8034e5f8bbdae060a640ee74c92dc2ed18dbd9aeebe61cbb76c43c96fb9136e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_tahr_tomato-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f898d7f383a09ca82ea7001b3c20dc07e5d73b3079da0928e53b8b879a2c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_squirrel_chocolate-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255609100c5e27e3263dab4674ee3491eeeb1e24e25ad216806088b16a1f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110083 Malicious code in uneven_mongoose_ivory-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6034daa782f5e2320ce633a82004137745af605003994965c7246f01b8746df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110910 Malicious code in widespread_camel_rose-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ee09477b2d1a847d3156f1d7ff59a21313063be58f5cc91bca09c5896f180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105744 Malicious code in meaningful_raccoon_sapphire-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dabf1c73e8598dda595c8815c472d1faae883c548f30ab253ed846021f351e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3c97a328223b8503c27b685def673b6e1d750baa3f3a39cba10592a0f1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670601ee007c759270939f786e6e5190a8bb5d3186a27165f8f9248944a08bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0339173823c1de7aae83960413ca25b4bbc60a0efa5210218d42330d72bd4cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97d307a456dcd898a1f0c5372130fb676ec0740c3a17153071de348f6446434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc837e58f2224929af8ee19362a7c1adebeae8a6b0ce12208bc04dd17de3d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71d0cfbbec897809090afa71b2fe792c9ccd900d744e502dab29a4bd0010cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d47a7524eb55a97cbb60a4a43677ac168fabf52aa2892716cc440eb364c0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda5cdb3c6c712c5459a7bc8530b59fff114b03197f56d5b8535735fc8bc95e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabdf569fc5de94e5227b4f071dad9a0aae30879a646bf0564bdb4c2172cbea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...