MAL-2025-108404 Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101257 Malicious code in deep_dragonfly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01755fee062f21f75e56b8afb725a33e5484091eb2fcf1c82318ccc40379e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17aa4b4193e069e6766f9eb0dfaff7ea66d15d0d592e9cfc4f05fb1fc55ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103400 Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4659afb648aed78b3ec67b00f60f18e5d3ca058686d9e9f443a7d733620cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abde16579132ed3790029da1bcb17deaca9152c650a847a3e3ab203ebf198a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941b33288aff0822592bcb07e2ba1565a27bd6efd71b71b3b22b795e82fdd0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb62a522331c528e26a8d610ddb6e920c4b8ca6150f3b4c783c6e9d5f186a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9e44a917c8fa2fc172c43c6c6004f05b37d9ef5764347359e76fd5efa395e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dda163b3245aeb8505a1eaba794a05961d6338ea470ac248abd2032ec863223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba4e13ac1c181914673347f13059aaef744f776f5eb4bfbca95ef0f4276cd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd904664c7f26aaf8b8b686105d339b3f2691fe027ab3ed406c2ebe84d4729c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109144 Malicious code in stingy_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bd724bd982462e5b62a578b826e2175822d7d8aaaf6c5b9f6ad34be37a7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106266 Malicious code in nervous_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a75bbab65461454ad963abeb9e071f004f4158e339721b8cf7c99995f08d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99604 Malicious code in armed_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5bc01de0ebc3170d53c490bfa795e82ff73bb7cf8ad08617092368fd19019b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106895 Malicious code in panicky_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9700e32d036b4e5752458218d2b963b3e95174f138a943ab48020233ab85be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...