MAL-2025-100292 Malicious code in cautious_jackal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51830629634aeddc6eec4a544b7f2d92379b857e58794fdad62356a13864ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105877 Malicious code in miserable_bedbug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcae94e9d95cee1c8be0a14871595caf4ee08694018684d8430a7c7720ca6d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110231 Malicious code in urban_whippet-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1479e1c09d38b6c199cdddfab829a33db67c4fb4032574a2dd629860ac68b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_crane_apricot-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb477c128c1bd47ac3efae5d12fedfea4fa25c296655518bcecdc75c903bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_jackal_chocolate-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214cc30cc2f8ac9e094ba6b2556ef6a617c7fee579fdd2f4ade865e56065efb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103809 Malicious code in hot_junglefowl_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6056859bd790f17f4d56d0b43bdc4c65cad92131a4c269a767b5df5b48c353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_jaguar_moccasin-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2149319b02766d0961c72c0628211fb13e1b0a265de210b5bddabd5d1d5d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106215 Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d5c1141974b41e6eb72b12cddb054967eca89c72aaa5d48cb734ae95324878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698f00d50fd9b9985026b6384cb492d6e5b362a517719d0ea4a1a7941ab03504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b62125490f11ca85d763b706b52517e731c8c328ea0871cf9523f837c724d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead71dc3184b9bc0878d21ba2655646f3cda3995aad211ac6adf052f14cdfb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71f40ae3d89af85fc6c216c2c3193613a8c1f0bee1ce99a5979aa394f40468b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd96b73c029919681b6f5b02f73937186822b7d979a8427d4665b9e9d928eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e697e1b50254163de0d152e4d40286bcda680ab0e31d4427ddaeee0db686fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d5f82b7877fce4ab655e337a540b950999829cc84281a4f59a26cdcf89b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106195 Malicious code in national_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db942149f537ff787487c9b1a9faf577fb961170a0ba18c2b6ace23657c89c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab94630f46653b1815a5f40e87e4a3ce8626f052d14ccc43c1a089e89474f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...