MAL-2025-111821 Malicious code in distinctive_bonobo_green-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cca37629d6d3005eda704d9bb90ed1c6282d5b8c4c9e84d84dc7072d19a9fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_grouse_rose-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ab72e665999aaad9a32ec34444c80cc4015cce19563d92d01bf1dcb96fd823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e007d9329918002f9ca7cb8ff32c77d01512ce3f2bf1c687993d84290a1c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100076 Malicious code in brainy_planarian_blush-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2348c23d45b64888037dd0e601646fd14cfe7113e05daa487f52af864cf9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99189 Malicious code in adkins-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b956861276b2bbd369c78582ae20415303aabc2bc166709ebbe1fdfbdc8476a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101716 Malicious code in dono-kue23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4712ff20b745d865abd4eef4406e355370b52dff0fe9564b392269d5e20a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mangut12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06c3ad73230c00cb2d48240d68a67b78b27a003617463f27d97eeb4d43f094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fac43bf4482d35c2a00965c1a95a0ccc6ad6fcbd14c0b305d0502a64fa5aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75573e9ade14997fe01e4e88118c7cd8b106418dddcac4932c6f7e94f7a98c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc366f01b826f29ab6c212e70f0ae3aed75d7494efbbf41622d445a3f950d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87e12cdad4a517f10a3b7c6e7570ee10292fc57ece0ba25bec2f4311eff4751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93405 Malicious code in bloody_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fda8df61be90230ff5572fab78fed1e7606dcf38dbd498856caaf1fb5c091cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91d4083fae9ef0688a7b954097d7280475fa54db76bbf2144d10e18995ec725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96373 Malicious code in rigid_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce06a5cebd1a12b3e488ab99719157c69f6e76a499756979b28ff4abef7434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-enting92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186acf569cd400d262b605ae13e2f9920a89e09fb71720d85549342bde38b300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-lapis42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f1ee7c8f54ae98da24c73a498e55bf06ef54c1e0ba8c1b3370589637656092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256e430adb7f749e3dad4b8fab3b7f5dfb99f075368432764a80e4af7d12e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-toge94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df812d3cfa9206a74fdfee2545aba5ce4e5179e5c5e167521f5224680e67837d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91232 Malicious code in tropical_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633022da671e80e17f0f24cf73d7614107f494d988b6de52011b6d6396d1fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88733 Malicious code in nana-tahu6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e143a51d3cfe3b549fc2dfd0b9b890d5b56d206b37a399ce302f4613fc4ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...