MAL-2025-110212 Malicious code in upset_bobcat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34972ab5b5e2b106ac4a9ade92a447aafbd2a6467b9b357ed7a7c8686d3489b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f151b915315a019231ae30513d50f05ba754f16b2401d5c525a646339dc474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94bee89b6c7464263275e5fdc4bbdeeebb8d9086d89da0bdfd00a8fce3e78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102988 Malicious code in funny_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ee3e1dd0779e50f9dd1d4c906108b8e202636e41addfeb96f5523eb2fae4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107242 Malicious code in pretty_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43c9bd88202ba76736996e859344c97560a9e71ba2e858b704a3d071ff62367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107166 Malicious code in potential_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4fbe6ba245d6ba9acae044eef9e9d60f1dbb8c47212b835aa2aac9d7fb4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111534 Malicious code in zeroth_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36ffef3b59648ec6a697baeb2630fc67334f8b50258bb6c239e5841a2f8c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely_ant_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158299efc0c802776b901b896025330e38af92c5a0d5673448917329270d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110991 Malicious code in wooden_snake_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272dacc13148d46e5d3b8f69303e92310a6a9c7431df43f6038bfa17d3ff3757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd7ee64eb2b76788003463f70d90f1e0d9c4295604ae7c7afef9ec4170864ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100005 Malicious code in blind_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad42b4232305a2eb36c3728fbf49c5599c0e53c84c09302e5e6307f773b787a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108566 Malicious code in severe_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e39a03d88ed47a02170a2dc29fde94fdff8e3805a30cbe0f694f7f060a7740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102071 Malicious code in empirical_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd701d6d9a3be46ff3bbd5bdac085043b56a61adde370778b859bdeebceb380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd8e4367bf882941f6ab07d9b0e6383628f30014f600613d1acfccb4184bc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13df612355057544132fb85235c46fc64508dcc9587171dddd1e65e46e657714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e40b2f269573cae6a6c88e84d46f7a14eb16d84bf1c4d0120e117e52d705a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d1522fe490712affb9d1fff904e38f085ce9e6a8d35bf8923d4b745cfb49ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_ape_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13295270770408a670b904a14622275844f30889f93d35bd95786a190879cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_meerkat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4093129e33e1a2d3c5f426bd38413ce5557d07a6c4fb3d6f5533af33cff88ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...