MAL-2025-110458 Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101836 Malicious code in dynamic_moose-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50e12111902d3b2455cbbc874f40d39b58f36a12ed62ffba770031974c33edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_peacock_aquamarine-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12949e6e7f85fb88375584bd7ddaa4f335f1238ec4feb70e09c5ae01fa086463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_beetle_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bec9912d125ec2142493b4a1cc5c48b0426052ee9f141527652fefce31ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107639 Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103715 Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_crayfish_teal-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb963dc04821f6911547fce3351cb355816179f1ddaf061fda8c92f626896275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7217590354acf2271a190af4906614bc82d194585ca19274448d3236a62e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4378058c6032fc666a87348c842875dd79f96358e83ce301b77782edc2c9ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0bc94d20e598987cebb27ce25b97419d6960440ffd5a154bf36fab576049f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108500 Malicious code in select_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7901595186cab2df65d6f5d41c0d425e4a3e7dcdc259e2659c5152b1a51c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbd41b1b8d6e77ed92ffedba32a868ec7dd8c8f165c5976ac234cfab60300f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef11fddb053d7f88c4c5a815c3dba2ad3a9dc4376140b4f2b34e14f91ae4cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13df612355057544132fb85235c46fc64508dcc9587171dddd1e65e46e657714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f683271b75a3ebbcfcce5eeaffcf6aad8a662f3deae9dd5dc556af864cc3add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9794b5bc1c0d852bb8d3c29277a9d3b0f1325a72320c2454f4a663ff7cb1bf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a75bbab65461454ad963abeb9e071f004f4158e339721b8cf7c99995f08d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...