MAL-2025-113449 Malicious code in dizzy_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd351abe677a02470f35b8a15a8119381e2eee640cd8773a09abb98b234b588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117684 Malicious code in unique_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e1cef7da45802b3493196f272cf19139f60fa036ab04a59c25173252ed424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112362 Malicious code in stuck_wallaby_silver-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f232de6acc496afab5fa7432bbe1afcfe29a31bb5f8dd200ef39ccbe34e7dc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_viper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b27de9c603ade624db0daa0f7d27ba0189308cacf8fa060b8f6ecba5f2a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110985 Malicious code in wonton-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ae31bc1ebffdc021ae87298c02005ddaaf0ae2b5efca2f12fa53b35881d093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107560 Malicious code in pvrudy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c588df01341d9665a6712c7a9645a0aa46334696238b3f370b4eb77847f8ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102724 Malicious code in financial_wildfowl-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe3ea7bb2cdb005c96c2fbe0e65d94212dc59ced401784c63fef816cda23bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4830bf3edda3aabfbfaa46d2a992d04d6e53e954fc62f4521885248a4b54834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107667 Malicious code in quintessential_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e9866e2ba33992136390647d5c4d66d1e45e465f19b7c96b27223e6ef9b8fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebf995159bf59d6acb90806f0ed73c6d0c486b1a3dd5bffbfcd909b20b59aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f78a692d78f46e60911e846a6fa60ac945a10fd6984abcdc3b14767c045dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107360 Malicious code in proposed_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69737263fe3dfd08db816452de708eb7ab12fd5b6a1f7abcc10ba9c45e6be277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4677b1392f1611857a8e004d345e54fbb42799d4a6dc3b9f410f1c1f47051eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102931 Malicious code in friendly_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c90fff2d1286fb6a64b8acbf921b223d1564040993cf089f91532b21066cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_skunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e170e4a26759717b01e97719292388afcbf6a3f1e71f5e236fb18ac7c2dc3ae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1204bd05114fec49983dc482de7f1a68a2388c2c6e555a801651a65436c5d115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106844 Malicious code in outstanding_barnacle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5e39339b53a7f0929b5e84fafa206f3417a6e5cffbc93629fa0037de164c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tongseng90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767b4391a9eecccc765f4c736b9513b260cf4613e5794bf609661d0544b06e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...