MAL-2025-109192 Malicious code in striking_falcon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e92a67ebaecc98c5e493f67209e9e6c0443cfbe9415630a6d7ec97beea74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107670 Malicious code in quintessential_ptarmigan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76930c06f021a1567bc966527d595b9a10950688697c345c5c6b75801e1233c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101145 Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102069 Malicious code in empirical_herring-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93822fc9e337542b2af4b6b95d3e65e7c1cccb4870d5d7c0fa5987fadb88f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_fly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83633f4337efea8722a1d6f5d92c2d3fd094b4ca18b3068d5362aa4e68d9212c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_frog_magenta-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7bbe7197b7ae454a4f8d2f7c865caa9d918f9e8b70ee1d7be2238835f44f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110332 Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101692 Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_felidae_orange-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bf4912daff75be009d406e7b5244fe4982a37935978f77bc19640e850c812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_louse_blue-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c031450ce82cbb47514fd3604ddecc59f90a389f473468561be4f53c8463ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_catshark_black-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0cc64c2fb374f41f266e299e1de998f0f2a3594fe123b002e977e39906769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_junglefowl_amaranth-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c3633cda3984970e983377123dfeeaae1d510d9b9589a6dbce2f217735e21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_camel_tomato-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b4c9b3f2c1a234ae5f7c1c0825cc6bcf1017f110b3e8e80d8742821a1564bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107202 Malicious code in pregnant_mink_crimson-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514f1988c54af6f01537c2e6ce03a09d805f0802b1ac4175640720bdc78286e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110563 Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_sailfish_plum-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3162b7e997616d5075209bee5c8b20c0ee6b4b3ecb67807f2f3fb20b59a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...