MAL-2025-107805 Malicious code in refajt-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e135f4225fb97235433b2e4b8e9734e7d49e9642c8508f502ec7695a89da55ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103057 Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107752 Malicious code in rdnder-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7063f7a147ead7488d6897a23ed0cff35aa7218086fd8edf0d01d79d32e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3493769b74d22ad1023e196f01c594d0db66a0b8d51618b50a5493ed159b416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bjlnfu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfced316bdecdfc99ede7f4739f97465178704be261981cf147c7ea666883d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_egret-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5ac622fd4d61e1067abe85e8335ce22ce8c01f751567e38318906021b5cd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99223 Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_seahorse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c04c442f46c5b70ec278416674308546f1fded098c574be85feb870cf5184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cf962770a6effb1522fdd6823c2ce17a65d9c84839e20934c9a825e35a8c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100402 Malicious code in christian_worm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e7322ca5a6ab0ebe51d44632c55d9285383acb636ebd6f414f9b63e8a9d76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99608 Malicious code in arrogant_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4037b8c1b652e3a7bd8d665bf53dd0d169ed6ec8d277945b32b9c5b983e85b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111028 Malicious code in worthwhile_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58047b211cd2e7a3817f28e57e2baaac0088116cf3dfcfe76c1bd5bb18e86ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99216 Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3514671470659144e48dfb5e328932f463412d5e7693270e0bdc6e8763640cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109421 Malicious code in swift_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100766 Malicious code in complete_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd1f55f2a9f5271cbde624716d64514c54ac6420bbec5041bddff53d226728e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neat_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617f00e739f8cb6fd61e78a842956ad4c3c551750adb1074f3f5469889384f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110815 Malicious code in western_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3532a6aa6f5cd07e8086974a8ed4d5108e39b14a3fdfd8e48de1c618925615c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101881 Malicious code in educational_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8b76423234b887b26ac4b7e4fc519cd8e09885e722f27b8fc95bda23db12c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110996 Malicious code in worldwide_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b30af96b3716b548f49e7db802d89ce56ff5737a83755936e0a3462141a3cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...