MAL-2025-109639 Malicious code in thoughtful_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d3ce0d28dc1fa17d9d4774ee51ea3b8fda1ff352f29dbcbf940efc4297260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106797 Malicious code in original_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a214f1f8468fa84e0757709c80f1ff527c0fdf1a54b687ffccb8facdb3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102361 Malicious code in exotic_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f204d82b53f3e63fcbd497b88c394ce32de0ce9a24ff3511140dd0526a3baee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111572 Malicious code in zucchini-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833a503f0bd57b943a3bd23811d6f4d93de41e0dd7de4738446c0b11d26806b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_koala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b010a88d9ced35704afc5cdee5f9671ecbdd53a2181d1f572614b18354f77840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_hedgehog-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd47046b5e7f433081bc943a443c8c34a8f6069e457c455bb9ff20a1ff24d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100999 Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107631 Malicious code in qualified_aphid-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c16d5f957b144873b96089ccecb0eb20c9a5fa33c348e6825e5d7fcf10493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103060 Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102145 Malicious code in environmental_seahorse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c04c442f46c5b70ec278416674308546f1fded098c574be85feb870cf5184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650250d346aedd5ac601200a696e099afbdc9ec2cb2154857978b27d2e99a17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7126afffd4cec2d0da38a07199d177f312130536729349bd5327e2e78c81b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132ba5fbea6e268a473c350d5f2ab33a568a77b3d8873169d1f3262878c9ed12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af96bc4036ae6028ae121a892f9c98e6028000880ea78ebdf035995dfa6db53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105057 Malicious code in legal_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2daf3607f787217ef5f1e8275856082f8564a3f2d540b159f5d9d116dd39e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108604 Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111533 Malicious code in zeroth_fish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f61f1955699fc561e707f1f90ad88fa41e24c3061cb39f357542f074a1915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109578 Malicious code in then_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ba93273b2dd583772bb2e82e17f0ae4c2222d0a629b410af88a4da101cf25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...