MAL-2025-112729 Malicious code in artistic_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa65578ef630cb234b3e94d045cae16b7bd60b502177da1ec1600141483604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_orangutan_jade-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5f3cddbfb26f09c48547be6aab60f2edb5be24268b470dadb0903cb095ce6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112155 Malicious code in organisational_hamster_magenta-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab9164ab1f5edb109890c561ae02247b17c0fac1fd211bdab05e81096201170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101771 Malicious code in dreadful_snake-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949733a698239325cafacd97a8ce0af26285a071aa66c6081d723699b4ec3c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above_angelfish_peach-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc1833a32ea3c56a7491a689343c0dfc722a0a1704b901919166981524a430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f81d0d2dab649ce22340bd57ec5829307dc3729e6fd26a03a011431c4b6bb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4691a4dfae74afa30e48357a1229a39131fb32b6d992076deb1657a7f8f42dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_junglefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de692ef758a4b329043abe7c62ae7d37f0e2a1d8b01dcce53f21c501e05ce2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106996 Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110375 Malicious code in vast_termite_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2322c155b60112af6d309582a0e22c44ef2a7ac4e62a411a9a23096fc45d6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367be7fbe44e1698b742a38a931ecc3181dbae0ed216e3e2bb9177af42975e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c37f01830d5a5fb385de9393cb00a756b25c8d5af979a89e6c2ea31248b45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-serimuka39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71b45792f0c0f0d9effd8d7864334bd0b436ae52f3cebf8bfe6069c01a50cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103440 Malicious code in hadi-gado-gado10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de04b90515db1dc13761210491cb25a2b77a0aa6505cf348727770ac0b374fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101907 Malicious code in eka-kacang91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50032c6a4a20707aacac2416c3433034edc929f0c833106e1d17cd846f68786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99465 Malicious code in andi-ubi11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4d3c6899e88546d3baddcd7b1c92d963119fac874fe31bd2660fdc44ab8d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101506 Malicious code in dian-bubursumsum42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c026e9e668ac1f7991091f666645990d86d36b867316058be2213cf4eec94fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98858 Malicious code in outstanding_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c025c29e00d48e48d56fa506c18127b4e62ecc3f573d43ab53e20c87e986bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fbf32ace820224ca40acd3ffae356a057aac875d236a7919ad9ab6e7bb87e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e3aa6443915db45f394888e89d880c9cf2f3aa39c4dbe4152c6fff28f3501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...