MAL-2025-106374 Malicious code in normal_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c8271617c3ef1526465d99622e83b89f471eefe8c8c6bec705d951aff41dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106724 Malicious code in omqhhp-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21fbc85dd0e3f36ec53e054dc38540362fd804281a98708019fdb9771962ecf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108457 Malicious code in seblakkuah20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b85d4adfa4bec9ceae7a72a3a6f512d035dbe6723e147b142d142b6f2f864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105596 Malicious code in manual_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0b63f8b334f1953e593246dc546f33d39b20f248791ca65f865a46610ae993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101113 Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100370 Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_gecko-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b528ebaf3b67c99f3ef740c0de5c2caa4de404aa765d455610c13308eac40795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8b67ea2e0ad8df25e98a8d72996e9b3eead54d99136cfd532a68387c4cc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a912d1d2923db2e434a34cb4419402c57f98340fd1f30028df92def1774614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101886 Malicious code in eerie_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326c51590a3fd5bfccd2ee50415375553323bc4c339ab0080a82770dc8b0869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99029 Malicious code in able_crocodile-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faece281da5dbd4c3da568c69a21b3f199b14138efd345dc0269c0f6fec43e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_catfish_chocolate-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd732b49a0427bfc58e053c4a6522ab6c865e4163a9e6ca33e705d3096121c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110832 Malicious code in whispering_quelea_sapphire-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3584b7675f13223698f096c85baccd739d23dad1ff3e6bb98daa9297b340e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103751 Malicious code in holy_crane_magenta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba140b3a88f7277900b6fbdb053e653ad5529aca1c45a4d0fb0956efd7f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110810 Malicious code in well_mosquito_blush-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ae7e7cde55e953eaa0772427b096c24fe582a1af4ba4b543c23640a40725e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...