MAL-2025-102386 Malicious code in experienced_reindeer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d046d81659465a75e5ec5aff3cadfbf16e823a64fa219e9de77442b5be87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_bandicoot-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f8c138215e579638fff69b2e248b987c556821c50fc8fc3fde1bf9104d2420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_newt-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d83fdfb3ea0bf9279856c0da3d0172db11cf9b82feeaa272941a753303d1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100014 Malicious code in blonde_bat-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372ff1f3ac79b60fa49ea5d5eb9273c2a875f3c937dc0868254353850354122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103385 Malicious code in grim_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f042afa3242a1655f00cb9b0f78c816be420a5a12aebc1d6559da3068443ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ancient_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd56acfd3fa0f0c40355aa8e9c393b043cd59d7fd860d332c916bdd2b68c3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103279 Malicious code in gleaming_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d304d466b780b92471357c55f012407f338c9d18919ee569ee7a144cd9c71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105745 Malicious code in meaningful_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d8fa2e50213d5badd10016581a58115520a3a772f449da383b1c4e88db27b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8485a98868518cd40eb4a3b1ba64183927241c30dff6023b3dcd9e1fd9d1ba08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107915 Malicious code in representative_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e8dd950138a1654e516d5c6bd3b221ef0862204bd92fdb503f62862b0c6b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5decfb876bb49b276b04d7cb7e276d78315e4c287859ee23f4230a094fe87efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc098f13a858a5d8a51ccf7cbca34033b1d74eb78985bd72257aa254d3c60a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105965 Malicious code in moody-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71e91b7d80ee6c7a03f423b367ca10aa2fd2b46d269f77f79087c1738c981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108695 Malicious code in similar_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ef629eecbb4f6fcd0b590d1896e9ce6f68392df7089944f9c130117861c8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109007 Malicious code in spicy_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcee1db8d76e5478e0674858053fefd7c4722d6ed6764a2c5655f66617e32a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57417c2f5e43b8adee44daab5bc3f031850b476234ae05625a3cb11fbad2c753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curry-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a8e038b1a520393500ffd209d3b80bcae14379b4cb67c569094ef8643de0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110971 Malicious code in wittering_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f759249ea728413740d44eef5d8d7d5150c962d561485c8d22c12bd52e74ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f450ebf6f5d2682fe39083cd786997c4d16e4aa3074fd1b9015c39a40adcdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6013ef089b303ff63c733fb127f5dd5066704ff15276d668b73501cc0b8273d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...