MAL-2025-99273 Malicious code in agricultural_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbff9dc293fad033029b824d051a757a29917e6d995099caa6719f4fe406587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107692 Malicious code in radical_finch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b47764126d4728b0851837795a0b9dea0041db6d471582f4f79df2e88997fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102337 Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108058 Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104219 Malicious code in inland_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b869696e24ff1d1c930125633559b7c0ab2a2f7a3bae8e8fe7c3ab3b8f29bc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101085 Malicious code in crooked_ape_red-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77822ef03eceba690e82a5e53ce3d92527a79564373a1848a5ef1785d8f6eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103382 Malicious code in grim_elephant_crimson-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3c861dde7775798bc53f027869432fff2c96d793ad1207ce270c58329e5a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101829 Malicious code in dying_elephant_yellow-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef62b10fbeba29c91b2488cd2ce7822a598848429150182c6aa794fa95459c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fefc4baafe51998f42de79b963ea29f41842b4d2b38e816af776d3d99784d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cfd1e71a8d20fd032e9ba6867adcd72048997339a5b51d769e92d0248cdcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239f1e84b073e57d671803addc4ae9705c00a3aca5172f3e1e79c496dbcdc5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2319920a7c3d641b2748a8ac7d4a04c0753c969e71385c1fd9ed50908c468a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110801 Malicious code in welcome_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08a47a805590d957844fc0a77ad4044b12316e7fc89e03b478f2ea2ac4651e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb410dd904b3a1f4659ca6317cec503b8cd57212bfd6f158853b2d19e0693d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22012c176750e8c56c9b688353b614bbff47d523d8dd732cc5a9f0cf72ebc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100698 Malicious code in combative_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f661c7a06362f63f554af0e9a41103510e7639b5d3d103e247b44e72fa6ecb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109255 Malicious code in successful_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee59da261acda6486187644b57d57831e60205cfd3d3c7c488067c220d93fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102893 Malicious code in fragile_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d65d0e373c513789fccb5fa164a507daacca9089e70500003bc8e635014137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103989 Malicious code in implicit_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac2af0d00aa7483e21410acc5434f4d2dc504371519f3a178b0c2aff39758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...