MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111357 Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103073 Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_snake_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272dacc13148d46e5d3b8f69303e92310a6a9c7431df43f6038bfa17d3ff3757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057949c217987df36aacce38581a0447325d418fe38ed740a3c0b28646ffbf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c925ba32552990d02d55a5db7856b78deffc72d8af36b05879d977330c32f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0402154b4a43e77ec14ca8b9dffa98bf5b3425e93b418d1050cbc614b7ee452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa8b2de1472b3783fad7b2d6f916c47fc8da8f4d87ee9f714e0cbcd61c169c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738c6200a77be361974cba47e590ab2655b99e65f4a31930703277dd6c82193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecdbc6589cf61b363b2cf1bad52ddb80a675c5a9339fbcbbb16c328d1bac4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fd65f5925bcb430eb737152de384353f57ed5c92f626d66c54816b3c9be89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fc9d3cca64430c2f5f8804f423d3590ed0b2c2d16d19983db1b659c690f4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ddcc6870360e101f778e5bad31be189f328a34be2aee4cbc6319252e2f40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025a5a03c134bc1fdcf95ced1133c8d30c6dc2393d32f4f3cd18dc40d62783ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106190 Malicious code in nasty_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ecab0a57612e85c81f1af4a89e7b3787de5bf225797ec7b81eef60993100a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99669 Malicious code in autonomous_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b075d8d308425e44d48f7aae10926973f1a7379fd22d9866acc6aba3ed3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60c4c82ce430adce2f24ccbd028ea0341b72a59462e70a2e85ab7aa8e134dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101140 Malicious code in cuddly_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6463ad6ba301778a36a02e2dce2b215fa3b2289ff44f5f43ad2a53b843836e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100712 Malicious code in commercial_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fa84e9a16cf5c10e9cee71fcb982bb9fe2200179fc30dd176874970a6d9a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...