MAL-2025-109128 Malicious code in sticky_squirrel_chocolate-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255609100c5e27e3263dab4674ee3491eeeb1e24e25ad216806088b16a1f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101660 Malicious code in distinguished_locust_fuchsia-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c53f4cf5cff0d58bdda4087ec99b5594d3aba5e75cf8ee7b01c27a5d765610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_mouse_aquamarine-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f34e1839de47ab896545531fa6820e8510d3fd04d005b3719a88b93ac79475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_aardwolf_violet-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cff44a669348fb7d096825d2f21b2e3960397a08850d95707eed624c035ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_macaw_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adf8e44d1d908c677965e9343b90daa9b4f30fde8cf27733508b788facb1ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107082 Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104768 Malicious code in key_wallaby_harlequin-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c09739de0fee1c004eeef42f32969c5e7f70106b56bd0f321f22a5a3d8d4e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99633 Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107208 Malicious code in preliminary_rodent_brown-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d650e0015a6e4e03d7d85267d2ec1032f6969c636ca5d240f35005ae755ef96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1142f6606b2ac6d67037d786beeeaa381377fe6455480a8a13a51694b5117d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d566057bfed43d671e6a3af24bf826edba23c50713c36b52b6f776d83f88042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c545ae9b2162057a9d9cfeddb2b10f10a86669a808e2914972bb54aa82209675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109526 Malicious code in technical_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f526762c7f374365111c19c0ba1198ed42eb659e112ee3f76f15f043c4d9738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104741 Malicious code in just_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414d920dd2c0fb08b283ef7d3ccb64d32a17861139a08ac1c5e2509cbf5e4639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109277 Malicious code in sufficient_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fd0383fff36a5079a01b9b4ebca44f176059f0b282c9630438dbd4467a2f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101584 Malicious code in direct_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f3121e03c5aec0542476339312ff0fea848f59072e74eef1373f46fb0d52f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102348 Malicious code in exclusive_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e83b3061cb8a23aa47900d8197336f232f4e3402048665614d9766944ff9544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103082 Malicious code in generous_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182079d6a90fe1094c8db6bfaa803aa2b465f73950b414f5f82e8307405d64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...