MAL-2025-107922 Malicious code in repulsive_squirrel-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123b4e9b337819501a91c5328159edb53a3ae8381e606b1707fc327da046c35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109718 Malicious code in tjfbkd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da247256e8f6c3e541de8b1ad021adc8341da954d739e61336be0504b8330e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109859 Malicious code in tsnzau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598ea3d8a0fc322c381ac7c91bf408d40e652ae4d8ba7470e752635d883dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101108 Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_ostrich_amber-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea47015799e97aac924e70fc902efd3225bd804384cd4a421a142fa202ee818c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100889 Malicious code in constant_peacock_emerald-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ee0a0d9c8c2847ba98f2c7cfe72f66a973abc50b9425dec71962bb81a916f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676184774de5ba23e281ce1b8af43d5bd0a1230ffae05bef7c42982e4f6548c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4096f5134eee4db5fa72008786b39c9d7a8c687db2e13d7d1f490a65c055832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5daa3c0fb450b54fe580b4f4ea7910e42246fcfcace9aabc7e36f5a8d370943f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f02c336e060ad839ca0a64b3fb1cd7374e7247b48d720e58573504fd131a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfac92284a80fa885e6409d52af79e00dad8c84ae14ced05cbd3cf5ffc4a987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daade7be5c65a5ea13496e1879657d30516522f78a2d8fda778db75bab87fc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0942ecc8fa3e7ef147891fe3ff93b768fb7db5598b1860cf61569d1628b0db1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549afaafb0ebdcd03341c467d24e7ce42571fb8dce9a3c2e6cb37af54c8bf9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c192c151693d7f67021bfe4ec73e6c4d18927d1b1b0c8fb11c75136663fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...