MAL-2025-100092 Malicious code in breezy_dolphin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb25201ff2dc9af62d8680b45b5ff94ea3f2b281b93ea5cf357376d4a289f511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101671 Malicious code in disturbing_walrus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3278efdb6f851ed9d0f0c0b9d7c5841825eb4906604426a5ffc02e7e4eba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0735e8972b3e08ab15dc750018d7efb2dc8cedc56914600e4d9d9a269d04c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103718 Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101821 Malicious code in dutch_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca8a942df06b9afa82c3f1f74dbf356f50838a72af37cecce72f654f73a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104363 Malicious code in intimate_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e139029f7abc8a64be54f9db333cbbf7c05730ae80c7f4dd89d0999759c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stacey-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0898173c7756e700fc17bcad1fbe5f08c56712ad76ed3c79bcc449553f7253c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdc317b807026770b3a88bedc7f49b25158348ef078373e231af4e982d03942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103987 Malicious code in imperial_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7441cdd872b96922eef8fa5467a425d17a5be81f7a19cc25d06c251755852e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-getuk26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52541d92f6b75769cb6e9acdd04462a8225d82788c5156217e57e832973dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104772 Malicious code in kiki-botok57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159f7c53f58f2fe1ff57558b30bf69cbf01832b04cc540dde0f32be90fcf4dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104788 Malicious code in kiki-kue24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ca1ca16fe4343d77b045e8ef17c1717ff9328d97c3fce73f8f3834ef1c0624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasicampur44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc800527805948295dc9f35d0b9adbf0213a35a11e82c2c903e5f34f8725d18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5dc99c4227adbcca8ba7cfd05700126f89f7bb7fbdb3f51d3aa697ca38b8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-esdoger21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2b2b60c23f64d56f83ebd523ddafaab4b7908fe48e5fa9f97fc71e07572c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adorable_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc25ca2b724ba9201ded7bf6c47666fd5e568402dfd059ce47642dee0b91c69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106522 Malicious code in ocha-klipo98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c915a76137e14463b665f466e73ec98da50b6036314223a6d792d7e31ad787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98659 Malicious code in cool_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8c61713334d22fdb205e6563387c5c6925bb4f045cfc293352087cd063f551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...