MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105812 Malicious code in metropolitan_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1283cdbd7d2a7481c97f224736bf7f76fc632c812299a72aa7f0a491c4a39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_coyote-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a536c7e119d2dcd2d8cde57c38e3d17e5deb54fb112f07c7e12d897558a7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103958 Malicious code in imaginative_elk_maroon-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9753caebcf493d2601461ff4d592659d7d94e2985362d472cfe7d301a1293f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106062 Malicious code in mutual_silverfish_scarlet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8603ff57675a38e27296a7d2e5e77aab7ac78d768a4635aa77cbd7f50ec59a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_bison_cyan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc33a86662bcabadcab7c50e1ebf4ce0cc9f94147d4c92a331d3282a26d765e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_jaguar_moccasin-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2149319b02766d0961c72c0628211fb13e1b0a265de210b5bddabd5d1d5d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d02296b9534ad91d605aa7a50ab282faad4d0e0f3ecd4ce958f27bfbda8cb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190081b7d139c29e7bf8a8a4208e47a627e0f8d5faa5c87a8658d293971691a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a72d4614abbac246d09daf101366fde12b7a29965c09c430e62a9403c3d6b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ed05923c6e802e90f0e1da8bb02d1ec501e1b290db4803911f1d72a5b572df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b379601d1ca45aad3e2ecd2ba2c343366595282f06fb07b89713c8c107447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4d215e864d3f335598089b7e2a5e63a6f7f9c80f075877a819dd0cf7d76f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbf261a07204ebe3a3b342cbb89692526a05e15cee0163209e1ed295c98fd67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c509848ce4167604a5fcd21f506f345c244a8f1a2b5c68480521936ce5276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286629adba148f34b074469cc8aa97781ee39d4f28a3901e9cedca646665bf0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f356be51fddb1161f8271beabbec9f83f1122a8cf75be340bf8e910e710c6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...