MAL-2025-106903 Malicious code in parallel_tarantula-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54841da5370b8ab2c008d989f7edf32f82d82babe717bf40f595e7f434edcfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101771 Malicious code in dreadful_snake-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949733a698239325cafacd97a8ce0af26285a071aa66c6081d723699b4ec3c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106395 Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad353e6fa4e47a78630c7621f76bf927fb29a9e4aab8ee48d6e87913b415546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109898 Malicious code in typical_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350a7846defe2c023705d1b334cad1aa10512e68bf11c9c46d8380bd2107731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7969af47147ff12b1960373fbca96361a07f63506f19746f04edb1e105f589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e349086f28d4d63123906e66dd9e9a072de4921e084d09b4cf579567494cce7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9773a2dd78172a0701ad569c2480b08611e8e8916b0c9039322b9e49eccc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100726 Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104193 Malicious code in informal_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c81a3e53d31844ecce197eba5bc955f1f75b13b0afb4bda76315d5748ea74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108877 Malicious code in smoggy_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0152b121db553c098b0ff1fe0f93c6db8380cee4813dd5c1673bd1f9812adf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108166 Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ea9fd5e42a3d7bfe2665346a66302402200abb1a0e04052756caf96c9444f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_dragonfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e8606215f4cf28b61f0776d982a998f3110c4b1c721328d426fc60874636c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110993 Malicious code in working_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8f5b6d1ba1b92fdfa2d79091474115257a7d1c7816f06b4f11c16997e80e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110228 Malicious code in urban_galliform_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb00bfd65c99455f3147c1a84c6fc9f173ee4cf1b59609ea4a83de01fd88c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110437 Malicious code in vertical_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d50523e090fad5f93d53162463720096df2e2e4b0f7776693f627879a6ffb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...