MAL-2025-106353 Malicious code in nlelci-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82730118d46e13073bd27928e56c2e31e8cbb2bdb2de6f50c8678397a432b15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101589 Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107639 Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103715 Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_beetle_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bec9912d125ec2142493b4a1cc5c48b0426052ee9f141527652fefce31ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_peacock_aquamarine-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12949e6e7f85fb88375584bd7ddaa4f335f1238ec4feb70e09c5ae01fa086463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_crayfish_teal-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb963dc04821f6911547fce3351cb355816179f1ddaf061fda8c92f626896275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4378058c6032fc666a87348c842875dd79f96358e83ce301b77782edc2c9ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193e5c688de0bf188de98f702ebb789243a821aa8b6b6c114746c0c6295cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350a7de5064761f57f0f3c1cd13d181a9f42c9b66808ba5b0c50c19b4c216b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99982 Malicious code in biological_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5737894b8e00d0c6eb4b4a0eae56c2a5ad0f605801aeae9cf2fcb1b6e7582b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104299 Malicious code in intelligent_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff337b1fa546b71b907063b360a4ada10fc324fb54fd65a09967b5afe9dcce50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101280 Malicious code in defiant_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda5cdb3c6c712c5459a7bc8530b59fff114b03197f56d5b8535735fc8bc95e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f683271b75a3ebbcfcce5eeaffcf6aad8a662f3deae9dd5dc556af864cc3add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbd41b1b8d6e77ed92ffedba32a868ec7dd8c8f165c5976ac234cfab60300f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a75bbab65461454ad963abeb9e071f004f4158e339721b8cf7c99995f08d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9794b5bc1c0d852bb8d3c29277a9d3b0f1325a72320c2454f4a663ff7cb1bf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...