MAL-2025-106903 Malicious code in parallel_tarantula-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54841da5370b8ab2c008d989f7edf32f82d82babe717bf40f595e7f434edcfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101047 Malicious code in cranberry-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d304027659209740433caf4910ee8ca8992e7b482f001e49c6e9496907d7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101771 Malicious code in dreadful_snake-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949733a698239325cafacd97a8ce0af26285a071aa66c6081d723699b4ec3c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106395 Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e349086f28d4d63123906e66dd9e9a072de4921e084d09b4cf579567494cce7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9773a2dd78172a0701ad569c2480b08611e8e8916b0c9039322b9e49eccc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7969af47147ff12b1960373fbca96361a07f63506f19746f04edb1e105f589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad353e6fa4e47a78630c7621f76bf927fb29a9e4aab8ee48d6e87913b415546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109898 Malicious code in typical_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350a7846defe2c023705d1b334cad1aa10512e68bf11c9c46d8380bd2107731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108877 Malicious code in smoggy_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0152b121db553c098b0ff1fe0f93c6db8380cee4813dd5c1673bd1f9812adf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104193 Malicious code in informal_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c81a3e53d31844ecce197eba5bc955f1f75b13b0afb4bda76315d5748ea74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100726 Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_dragonfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e8606215f4cf28b61f0776d982a998f3110c4b1c721328d426fc60874636c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_crayfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031c15053170f753961c6efdae3b2e9a7c1144e6de0c6bc3b47c55acfd579714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_beetle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84710acaff4fcdbd02b85f1f39c3708b7068652bf8549f7b941bf58a5a1ca8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ea9fd5e42a3d7bfe2665346a66302402200abb1a0e04052756caf96c9444f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108166 Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110993 Malicious code in working_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8f5b6d1ba1b92fdfa2d79091474115257a7d1c7816f06b4f11c16997e80e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...