MAL-2025-99645 Malicious code in associated_seahorse-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b66de8aee9c3a47cd37f9f7693d15c107731f052f6f74dbafe33c8001b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103741 Malicious code in hollow_dinosaur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a7ef8b88ccf1ad7efe32f7bb8520f604fb0eae09220aef1dd870478c0e6593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593448aa452e5e879aa598fb94439d10c159f4ccc32d414e113012c5bdfa8902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef27171efadd501272e1b5908110f1108a0e6e7a80282e9d251330a7c04bac98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111016 Malicious code in worrying_mole-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7a1584ac025f6aa4b83d232ac7d74afe3c6796d41fb290a419f12611e8bae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99948 Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106854 Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106915 Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108462 Malicious code in seblakkuah25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f630a9549ae8768b39205f45445c3719eaaeb93abf7fb4c0a823b293cb2237a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109654 Malicious code in thundering_raven-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fff3f4825029a31d83ebd77fc4056500790584e041132c64803fe0dfe46ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101879 Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_locust_fuchsia-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c53f4cf5cff0d58bdda4087ec99b5594d3aba5e75cf8ee7b01c27a5d765610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bbe3717d00a51ad80e416af90a8440be9ade4d6c0369c8b0b82af568c5d131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096491b58c4b514ff4366ca820ef70febb654e0a178f9e7f27c34458074e7027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe11a8ca6f5a94a5ce7999ea67e98dd50e5d352c6bb91052216f047579f597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d080c0e7820a4faf2841e9f30a74f5d27bc98dad19518c8bbd4f91940efc00cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108199 Malicious code in rotten_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b472aa961866aa74b3f1179367f15926286cea4e6f12cf00ceb1a590a79209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...