MAL-2025-99055 Malicious code in abundant_tick_maroon-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfbde61c0f391614f890ec70eab96728dbc19f353b14b2413d353e8caefb551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107637 Malicious code in quarrelsome_earwig_white-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8034e5f8bbdae060a640ee74c92dc2ed18dbd9aeebe61cbb76c43c96fb9136e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103410 Malicious code in growing_kite_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ab0f026222ced597e4fb0c991def80d92ace6f5033c8ed071c203a2b81fda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_squirrel_chocolate-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255609100c5e27e3263dab4674ee3491eeeb1e24e25ad216806088b16a1f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_tahr_tomato-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f898d7f383a09ca82ea7001b3c20dc07e5d73b3079da0928e53b8b879a2c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110910 Malicious code in widespread_camel_rose-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ee09477b2d1a847d3156f1d7ff59a21313063be58f5cc91bca09c5896f180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110083 Malicious code in uneven_mongoose_ivory-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6034daa782f5e2320ce633a82004137745af605003994965c7246f01b8746df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105744 Malicious code in meaningful_raccoon_sapphire-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dabf1c73e8598dda595c8815c472d1faae883c548f30ab253ed846021f351e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcaf5b2dd747fa63c42e18f25ff9ec0117e078502bac36a00cb86a30f930424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0339173823c1de7aae83960413ca25b4bbc60a0efa5210218d42330d72bd4cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbe528553407c71bd75c68f907fc0eb9033cad24ce180c61b310249472669ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabdf569fc5de94e5227b4f071dad9a0aae30879a646bf0564bdb4c2172cbea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd08bc7067911b8c098f6489a29c233d292262f2294e4fd96559e51b47f9a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3f665718f62d1d6df8d0e2be32b481003abb1b825ca0bf589a2b3b32cc6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71d0cfbbec897809090afa71b2fe792c9ccd900d744e502dab29a4bd0010cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2656ff77b449433919171d7f60833a97b7c01c7d02fdb45e6b0dbe35e6b33a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee59da261acda6486187644b57d57831e60205cfd3d3c7c488067c220d93fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...