MAL-2025-101572 Malicious code in digital_mammal_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d877681bfb774c52646cf1a01ca6e4ad20ab89b1ed589abc48e12c9695a551d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107125 Malicious code in polite_crab-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd7c7586078215e15eee03224d441fd0ace71d42acc30648e756bbe1fcacbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106888 Malicious code in pancake-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da94a2bd1f19d55d1d73a0e6c9838d352b38aca58bd7bf5382c069675807ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100575 Malicious code in classic_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b07b4cbcbe1655f5c2871ce405e5a8baca90e1b7bc1768dc36699618240dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106856 Malicious code in ouyrjh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6c5d5ff7fb8c384df3dc217b566e50885f006c4c363ad8296d207839896cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_clam_blue-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b7f2bfbc17b4ca886890418a077adce8358bc02dd446a24469f34e7e3830e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_caribou_gold-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecb7411c6b7645eb899eb9e431121623c74961b1e1011822781ad7c9d0e1ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_ostrich_amber-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea47015799e97aac924e70fc902efd3225bd804384cd4a421a142fa202ee818c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107801 Malicious code in redundant_sailfish_plum-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3162b7e997616d5075209bee5c8b20c0ee6b4b3ecb67807f2f3fb20b59a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107363 Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_ostrich_violet-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bc0c8eba8c186b2a6420ede56075d1c62f568cafbf12724c755833c75fc3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100076 Malicious code in brainy_planarian_blush-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2348c23d45b64888037dd0e601646fd14cfe7113e05daa487f52af864cf9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105135 Malicious code in like_hippopotamus_lime-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb9135ff48c44e848cfbd1c08f9ae73039a4bec900197ec385948aecea67751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100638 Malicious code in coherent_chicken_emerald-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876abe8fee9fbe5bab0055fb7872d768be7728ff88eaf15fe43d037d3723e10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_chicken_emerald-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876abe8fee9fbe5bab0055fb7872d768be7728ff88eaf15fe43d037d3723e10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_owl_aqua-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc235c1913bee4d68210f7f9f4d185159d4bb00c48cafa5010f3d0242102da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread_camel_rose-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ee09477b2d1a847d3156f1d7ff59a21313063be58f5cc91bca09c5896f180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102310 Malicious code in excellent_mouse_bronze-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c608504f15474bf35e73f82664ed7126edf991e4a6109c42f24b0ab298f67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...