MAL-2025-99216 Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108057 Malicious code in rich_sole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ad0832598cfd4dc9b18b8c1a1c04c24b6ea260152762432b0a3441a04601ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110611 Malicious code in vocational_python-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07057ee54ab66530980519c51a15a6994823646725b6079f264be0535cd305cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108905 Malicious code in solar_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109239 Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103919 Malicious code in ideal_clownfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3d8fb042dd9dd5a7e046108b7ea99ae7a8fbe8df0eeb8d06e5dd5735b18f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99608 Malicious code in arrogant_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4037b8c1b652e3a7bd8d665bf53dd0d169ed6ec8d277945b32b9c5b983e85b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111028 Malicious code in worthwhile_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58047b211cd2e7a3817f28e57e2baaac0088116cf3dfcfe76c1bd5bb18e86ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100402 Malicious code in christian_worm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e7322ca5a6ab0ebe51d44632c55d9285383acb636ebd6f414f9b63e8a9d76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105654 Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_alligator-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d9fc48228f6c569fc13f7a5ba9e4ed44ad07e8210ab7c04fc3ce6d69ec4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109067 Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_owl_aqua-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc235c1913bee4d68210f7f9f4d185159d4bb00c48cafa5010f3d0242102da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db97f0281799f72433cd2c269a5fb2a8210616557d48c0dc7590a883d69c893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b075d8d308425e44d48f7aae10926973f1a7379fd22d9866acc6aba3ed3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3514671470659144e48dfb5e328932f463412d5e7693270e0bdc6e8763640cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a116546a6ad4e941e3e45c8dd346e37667e8ee4335ac630b3483f9e0a4098b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0acde6583bc065b73effc630c117bc2cb8987182164629b7f420494249978c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109022 Malicious code in splendid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1905d0b2e83e6853527477bd779f3289d08bf0aecdd8835c1e7a176c9970f111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...