MAL-2025-113240 Malicious code in crowded_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0feefd38f929582bc09430f3257321ff9a57440671a7041a84c9e74446d30742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116861 Malicious code in rival_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394eb2d97d08f10865e6f91a08887604c2f2bee4c1aa83fa09661fb2cb3f853f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113376 Malicious code in dewi-tumis56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f041dc286f3757ba7f7a739a097efb58dcc6b6deca97f86f70ca92affec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118246 Malicious code in yanti-mendut86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230841465536c323d654f6248bf5fe9df1bad84c88090237ee082913f685b613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113425 Malicious code in difficult_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c942a7c5acab35292212037d34b2a5a61f418903131ca30ca41b688bb90982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112138 Malicious code in nutty_aardwolf_brown-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d030e378426c3fa4bbd9f7ee9cf104f2e34c10b6a62096428eef0b4a696c270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_barracuda_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0916bc1d588b00a01a6a6c7bd78806b02ea0c25160b50de183a21f34797206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_tarantula_amber-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e89c67cb1ded747a7fca5760192c7069a55c68dbb3ef5ee469273e0cae064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_leopon_emerald-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82df52957fe7d083834fb58fbb684b4444bae4054bf2c831c676148468419892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_quokka_rose-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1259c1b732827632cfa54534c31dd635bf1a9abb94292926cfdbcaf1c44903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112112 Malicious code in molecular_turkey_black-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3cbd9ccfa20d11600b940c652b851e7a5c4a0dd3901fb6dc7447809b738938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_wildcat_amaranth-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8efb556983b6652fed37a875e00e837d62b07a3b400af4a0b58d48a60a52f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...