MAL-2025-99979 Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107417 Malicious code in public_tick-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4268114cc3c4467fcd08f01e21b783123cb38c02cea4d430f1998e3b95576dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf9d39770379de148c7a8a9ca1077a9a2a3977364779d0fc920a3b5ca951584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109100 Malicious code in steady_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1ad880808aed9971cc1c2acdca40ea38b7f46b9a74a02345bcdfbdb665b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103757 Malicious code in holy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470e4df1139792fe6f1250db3ee51185701035dc8bdf48338f0b4d8a4d5ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102547 Malicious code in familiar_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5af38438491899662ffd26a24587673d7eda99e3f41fe3a64c743e63138ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in waldo-wallet-val (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8397fb5436e0bf8164d9bfde11b73721649d47b5824daa265bac1944d2a44ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ayala-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7438732a1417e4fa58968765ec3723d623c31bef66dd5e0f6e35be036d159a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ca2ba2083a976ecd3dc203ef15964050a4339665ff75637c4ecc86c41e2a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-gepuk22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07476adddb824924a2205b1a1df568ea4eb588cdfe9ba7b5391ec4811ba29b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105918 Malicious code in mobile_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09803c518e6fb467fe5a2621d83402954e4c8ff71ffced82a06351e94f1ccd46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108361 Malicious code in sari-kue83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4b79c15f348f049e2f2602ffcbe346108f651e6284962d141cb05b5917b811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106982 Malicious code in patria-tahu47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10028915c4b50e9b0175fd85ea46a4cf889c19997292602ab20279711bcd0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110558 Malicious code in vina-semur66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab70ddafb8a79e56dace2840b4ab1b192ccf32e9463b858410b3a08a2eec84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-bubursumsum41-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c78276122e15da56fc7d284176e507eecca18846045d7f2a590b0fcfcaf3811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75758148c2b745c7bde7131129f546fc3dbd70e22fc92ee1e9d7d7ab232a9787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72896b36fa01a9e70b3560f4d5b2981f981d13c2d1fc07685ee4a7f49d48f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb1afc5d3fb8a723f7f60e6731e6da7366c21e587ea0331b1eca42b3472318f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96539 Malicious code in sexual_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c1fdb0e7c2a25482fe00e2d9319d1476e36ac5c67ab59a7330e3b7a08c10b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...