MAL-2025-110767 Malicious code in weak_swordfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c408d57fd55564e82507811c08b67eea326da0242c36de81e9a9c30e2a2878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102580 Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107135 Malicious code in pomegranate-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9626bc401b942c8814ba3b920f1eb300ec76318d7ab845fbda660bd05be931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100784 Malicious code in complicated_gorilla-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed740e1d2ccaaa6f76e4e85b2ee842d313dd58deb202bbf130d6cf898ac54ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102665 Malicious code in fellow_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefcadc74b89fd1f0ae6d8229c13775d3d19d8ec5f086e57d939666cd0b2bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101331 Malicious code in delightful_sole-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9d21a7fb32fb6d3a198eabf4a2df2817b663452f3130981b8e941911c0891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100262 Malicious code in carbdgonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2c3b11a88f3747af265c96348542e37cfc010adc531d327526191b75b6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_bug_green-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34df565eed1ef7190534019c62c1399567924d70adc123446c90a33e87b059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_lemur_white-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b6d27b83d20d88653fb6502f52ce37c244c14ce9ed22ae0a7fa1ec9b96677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_aardwolf_violet-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cff44a669348fb7d096825d2f21b2e3960397a08850d95707eed624c035ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106215 Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105072 Malicious code in lengthy_kangaroo_blush-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927cca983d456f2c432a737f07b5ade3493f39d51f6ae7671006e84480663f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101864 Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_puma_lime-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b65a68080ff5fc45a36f17e8e593a4ee689258a5f2fb18c947b64fdcd9599de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42016e31ade677692596a3be320f3ced8a2340d3eb575f3289c86f77a5d2f760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105192 Malicious code in linear_gorilla_cyan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb54fe60ecc7e1369fce16747a2847ec7c33ec12324e45a00b614a0b1d0445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...