MAL-2025-111856 Malicious code in enchanting_xerinae_cyan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab4bac3dac8abbba0c8f60b581f3fb51b6d921870cc648695dcb8119bef1ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdfe52e88030454d65787adb3359e0ccb7640aaf7ba5098802ee69c2860c542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99706 Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102320 Malicious code in exceptional_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09213710ae52bf64a66329fe9b2dbb08ae980fcb06b61a89d183b937e4a3389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107432 Malicious code in pure_louse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14368e86d85683f40604acbbb389b04cfba45f9e09f043f8f683c6d77b5a67da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf25572a7f18e05e73b42fa7607d97917094f7880d812e35bb13f6f0417d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100669 Malicious code in colonial_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8a546c81ab593a9352b9e41d97b7bda9df04971b721905ba9167b8294c4e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100661 Malicious code in collective_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a394945afc95b127c504b1e717282dd8444a1ff9219dfc2a0e986f38a000dbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106904 Malicious code in parental_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb0dce93e89791a7621f17ce8b64d937137b664a31581d6906e65627779bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a87c1875c044932072789f1764fdb20ee71a1b8d676ed29fede5ac3b63327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101317 Malicious code in delighted_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0014e7a822c9e2b3257ff5abd2d1a1b4c9fa7c6b131beb066393db8914e7ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083fa043ab917b0ae6eebfe691e74c02fae5f3d2ddb1f46e18f2cae915f2b5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c74ed910e95af44d33ba07b39f48b7f09aed8d1751ecd17f07601dc40cc9b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107315 Malicious code in professional_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69be4769d7f0586bcfdc815f0b5f996f9bcc39fb97850184e81ae0db9cba412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...