MAL-2025-102828 Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102573 Malicious code in fascinating_rooster-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801da4e0169249bf81a0b7779de515c671bf89590ff4f1c527b8e657e51048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102706 Malicious code in final_guineafowl-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90863b402242678017543e7d60c4521a7807832a564f142e8bb57408c9fde6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103943 Malicious code in iemefd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0bcb5008698871d7fda2ef077151d722955c12ce384d67032375d06a21b87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110366 Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101064 Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108064 Malicious code in ridiculous_crane_copper-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4775dcd937521216de19ca14822c0f9a4450f177a8876c384428c3d0d3c8651f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109591 Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafd4c2a483d81d67c7c721559c00ba3ec87d286c8e05ce18b2dce57f501b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0e9ed0e77f48bdf019806716648a10844627875389603f40d4facedf82918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481a627a68d383fed90fa07d5d5b3d15b6de15169e9843cc52807980ef464db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dc90cdff3031af3c92a63814c9d3fdb3608b645891408d07c47146f2a89d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6295ffd3a326e114af8bd5a826aa6d7f930ea18eda7199e0fb84d3cc544b7044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf17db4851f1f171248e3b2693e3ddc8a344990a97bd489fc59d112f5d50ef9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5641c55d5e30dbf0bc00b874bdf40f867e0c59aa09a35a57960d536b694e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...