MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108232 Malicious code in rubber_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade11ddb015a4032bcc0514cce42006313205f5fe0595536be508895d90285b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-serimuka76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70062d7ec4e2910fadffa2f81d7e4c71504575fe365aed700dd924d97223aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94725 Malicious code in gothic_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f7626b3d13db81ee51a35cf3239c478ad45a1c5f5c4408be359748d04b474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-mangga26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd49bc4a0410f5b4b03b394765b1d7cb1594d4af67fb3e8cf4d2a17f47c055aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cffbacb7cc46761836997526046dfd38fcf685c7ca3d8e2e94ef2aa8b70212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73079 Malicious code in gilang-klentik16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d2aaa18eebcf5255a420d05cbcf9635c6a2f64e09c05a505dada2f42155b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70178 Malicious code in rapid-green-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae324bfc8ee34237b6319750c305e0c45eda20eac31709166eb455e3fa2ef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f926e956e406b2b156c071e23a7ef4d1d004998a201e4c479ce22af1fa73ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-dradag3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5283a18beeca87160f5779abbe57677261d6271eec31a41cf24b999f48d123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64104 Malicious code in little_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c22d3c0bf64050a2b2bb7cbaa47228ccca59a74606cde5b4bccdf303f45fb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeac58fa8ac3439cd24ae3063d9bc3c11a0a2c3555c49eef079af75c4e817ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61391 Malicious code in strong_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12bad00c69362625c0da75aaad22509ee98250fdd3228384cac726ebd4e73bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60483 Malicious code in flexible_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b2671f3eba23bf46a512fa3e421cb65abe7b62a304f5904ea08573547135db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55459 Malicious code in budi-peyek7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27d3783ee4dddfbcd7d33c453cc235e8523fa7be601b189167f8ded278654a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-gado-gado67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94d5828545f462b005c704b929e2bc115597e41a94d5cf0d5df45e6a3fc0a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-liwet86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14040342c13088720afd18ae5ee27ead411c37d5d59069d26ba2818fae96750e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-telur18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2fe913f8d6323eb757129005d4912b28260550061eedf6d5dd55fddcf951b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...