MAL-2025-108344 Malicious code in salty_tarsier-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e2a72b3e55533acec13dfe16592140ba6d9bfda5737b701521e3684f7a1816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108463 Malicious code in seblakkuah26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbab68f5f804c0ea7ac1ab794e0ba2ef5215cb52fb4237c43a27126c0b801ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101238 Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103831 Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100400 Malicious code in christian_sparrow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9248408c30c91063fd0447413bf209bc35288a751acf6ff75c9b94e15cd9d6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107092 Malicious code in plain_slug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12b84c51d469c1341c7af1430f863f4568d5972501a4fad15c820ad8db6fce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102671 Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102254 Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102007 Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101671 Malicious code in disturbing_walrus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3278efdb6f851ed9d0f0c0b9d7c5841825eb4906604426a5ffc02e7e4eba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103941 Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102245 Malicious code in established_baboon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553d9aa7e9d62bdcda31165100be9e64850a1e0693a4cb782c6f0e29b8a594c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_crane_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891beb3953c8b2256a7d40a8a930d531ce03679c150fe13977c69b9def9d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_bison_cyan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc33a86662bcabadcab7c50e1ebf4ce0cc9f94147d4c92a331d3282a26d765e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_constrictor_scarlet-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831cd98c7940951c3a4d29948007bcf805932b690da02565a625dacbd1ec673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105881 Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0735e8972b3e08ab15dc750018d7efb2dc8cedc56914600e4d9d9a269d04c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c88607935e7b5853fb670749c2ddd37ea3ddee7bf3ef85cadda9143a9eef4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...