MAL-2025-108597 Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless_spider_silver-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe69a43698ddb848a983c04bd410d9fbc50bbfc06ddc861a445c1e488d4e3a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_fowl_white-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a94d2cd8b8db3a66b55adea3f167abc0df75e1967a574bc3b0b40c05cb8a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_macaw_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adf8e44d1d908c677965e9343b90daa9b4f30fde8cf27733508b788facb1ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_chicken_emerald-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876abe8fee9fbe5bab0055fb7872d768be7728ff88eaf15fe43d037d3723e10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107314 Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102383 Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107082 Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a662c3a68a595d1cffa0992dfa014e10dd668fdc08e0d4984d56793f93eb6c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517686885e63e7ca60474cdada573257aeefce4c13b9b7637f9d3b6162024553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab96c964faf884e683af3227f5dba1cc1ee061e969dde38b4e57f67a6b49a8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4810a92490f4c556e9aa510d5f1823f957e7905fd2121f1ce47c39bae55a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3cdcda9d4ffcb170cd9737da4342c6e68cc8c6ddcdf2f4e9a0e65e30a13ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110122 Malicious code in uniform_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dad0c0a80e5cf8e6d1d3418689dac91a74585d93e2995bae52efde6fc785d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99347 Malicious code in alive_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7196fca64fdb6d836f5861d2730b664272dffbaa9001cff19c808c1cd720cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2306b59d3bfdd5204e37669c4da188ef16ea0323139f5aa5201007540479f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...