MAL-2025-110805 Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107224 Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_emu_ivory-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4464a3667ca84e19cb1a89958a2b80213cfa7b5857802634e34c90460b79b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_perch_orange-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a806c3618479a58c80be3c9ba1fa68f188612d1b0123ecc4af2800d4615a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99026 Malicious code in @dokja/dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00e2bdb468b1013a4d2e795f03b11b099265b79c266351f4dbef075e1c9fbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100795 Malicious code in comprehensive_slug_violet-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db622170a10aec44e869c0562e3df15cf19817214e5710cc6755a2ff6409fdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_crane_apricot-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb477c128c1bd47ac3efae5d12fedfea4fa25c296655518bcecdc75c903bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_elk_maroon-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668acc36c186f6d2b1a2576dc9b17c58658e77cf98521363367cfd49d74071ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110157 Malicious code in unlikely_ant_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158299efc0c802776b901b896025330e38af92c5a0d5673448917329270d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4cf8a2975dca55d026c9f09c408f67f1a7b6535f756364b2f087ff07249e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba637eb67a32b8325917e48627eb0b28b2582b42b38fdfc4093195e78970a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f33e127fe41036ce7da0cdd2db27db8bd8b0a730f23febfc6f35c2cc8fd998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116ae3f14ddd2397d9800facf63320149a898de228d322479a98069fdd715dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1eab774b516b5502574daf8c4b9cf5f8381869fb3b6e300d61ee35432d7040a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb0dce93e89791a7621f17ce8b64d937137b664a31581d6906e65627779bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81fcc2f44f14c1936bf377c4d3b132e06aecffde7a656ce06b6b32bdade6c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4782ba6d2566d874bc550a6f817aa157130c6d120cded3670607a7cb6cceeeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ffe0bdd52550aa550744f08b70681cbeb2ae587720ae39ef9630a8bde53248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cef90837509ba039e8bfeb175d4e344fb2133c9d4bba06207fc326a3a3fdac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...