MAL-2025-106003 Malicious code in multiple_wildebeest-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f13d35c7812ae3fe0ff32fe0b43f414d69709514a0295fda07c5bfc5500193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104051 Malicious code in inappropriate_lemur-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10072f2aa042303a4bef60827e49c9911c0e5abb2f2ddbc5da433dbb657eec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6a5633a2c1d323838ceb1e9f7a2363631463c1eef040fdfa0e19aef094478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107429 Malicious code in puny_scallop-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9739ea323487f99668ba950ef761ec6ac4b5cb1f94302a32f287b205b319a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104321 Malicious code in interested_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a614ae491d9f47d2e2633effab16f6cef0e988ff652b93c9cae1960f04471d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104228 Malicious code in inner_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ce9840d615d84776d0401eb6bd00b5c84e23540e71084c0803a9ba6468a143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_lemur_white-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b6d27b83d20d88653fb6502f52ce37c244c14ce9ed22ae0a7fa1ec9b96677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100857 Malicious code in conscious_mastodon_ivory-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9053bdbbf7f1a712cfaf7a1843caca6d1f44876cfedb23d63fc8af960dbdf521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_puma_lime-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b65a68080ff5fc45a36f17e8e593a4ee689258a5f2fb18c947b64fdcd9599de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101864 Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107801 Malicious code in redundant_sailfish_plum-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3162b7e997616d5075209bee5c8b20c0ee6b4b3ecb67807f2f3fb20b59a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_bug_green-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34df565eed1ef7190534019c62c1399567924d70adc123446c90a33e87b059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_aardwolf_violet-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cff44a669348fb7d096825d2f21b2e3960397a08850d95707eed624c035ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105072 Malicious code in lengthy_kangaroo_blush-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927cca983d456f2c432a737f07b5ade3493f39d51f6ae7671006e84480663f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42016e31ade677692596a3be320f3ced8a2340d3eb575f3289c86f77a5d2f760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...