MAL-2025-107399 Malicious code in provincial_tiglon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d85dcb101561f2103397b7df3fc82c2802af46af2a8782b2b0ad2ccd82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107114 Malicious code in pleased_wren-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187ce5b616e77e40122236bbb7d8729d1c1f87ce7b05b3a3b3860a0b44f1595b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102096 Malicious code in energetic_bee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a03c6da0b5d27fa8aa3432a13cff66d4925dae0aef4eae5d7eb3adf0839d277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109506 Malicious code in tasteless_gorilla-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94df7faf0718adb4e8643c9e14605e1cfee08a2677ad655c08d0a8c9ece66ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b4df1f7a48ec8bd83ac4ffccbedbd469cabdab117fd0b2a2fd21ca97f28a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106745 Malicious code in operational_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0e5d0fef4b38cbdbe6293af17f3c8f32fa7b751aa71b014ef13aaa73b60d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebe1ee176fadf1061829a7d87a45e4d9ffb1bca46d5672d10755cf0a15ab12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a302a44f683c22988bdde411d2f835af250db0a372710b04ba879715441db98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99086 Malicious code in accurate_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e295043759287838b8a72826e7c58765946dff37e843c6b7f08f5bbee9d59f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102919 Malicious code in frequent_ox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea899af42c969f5ba663af62978b560fb80a20b43f86905858300efbd94454fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f06353b8139dc71d612a07dc58c733c14958b16c35b3f477eede1ac35a402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99524 Malicious code in applicable_tern_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fd5cbc64e3788e22e6d461083864fde5a8905c348bef66edb98fb6ed9ce84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_roundworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0053d521be733b2b6e29f8cc32d936a0a2c0bc1d940ff22b2c571931d5c98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gepuk26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c515bf17b3133afaca96954468bc9fd354874a274d809ef724f39317b1aef190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tahutek86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ca41bb84f2245c3092c7b7270d66c4b507324ed175f8db7a39af1f30c05f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2026bb00675c8dbfd010c2cc5dc772cfecc57e3497c8c10d85745556129fe58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangdungtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9a2d258a2ab083ccbfa8f463bada8417e935c950e23b191aa050cc2168623b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95003 Malicious code in individual_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf0c33358e6ac0e74ae6c07e744fe9ddddaa50277a527b7b72199aed724b91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95957 Malicious code in powerful_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e5153741713505a92f9e9d4be1c224fc8958d2e8c56b361b785acb6727c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...