MAL-2025-108820 Malicious code in slim_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe48ceff7e562f9ab2e9811fab542d2fb9a4354253ab9c7f73efb491a5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107363 Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108188 Malicious code in rolling_panther_purple-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627eedb485e057e34481e3e2a0879159c3d77f9c125b84bb82f26c92a6a30903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a32715a3ff4b90e4b89719705b8fedcd6fdd2cf3358b029b1edd70798235ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38467e3b6be96fc947b1c3bc80c9f8b59ea50f31f12c106652e944356cf796a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d27dfe91c7f7d680c7f605e70e09a1f45aa37123bfaa0d764c3e736b16c5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104071 Malicious code in increased_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f8b537eda3d78a49dfbadddc62615cfd8a13b02d511a771f2bbd26b5c95d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107925 Malicious code in required_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b235ddc6d477dabeed4bd9f69f0e1f18d99946a79f6a8e4b726ae37ced145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103937 Malicious code in ideological_bandicoot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7849f4a8e835ea84c65a5f8a3b6b13e63491bb0fc3d649bc59bee57cddbe8833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99059 Malicious code in academic_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0424bdf1a8da73eabcf073e797ed0ef364686dc7e1df09e53de95699094e97f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_finch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1afa13ab37b7b75195145f0b92a3a7c97a88ba7e91bdf1eec232d809649f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bffe92de50e0bdef22bd91d3b9e40fab10e268f37e2e2474029098b4a1578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_quelea_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82abc7c6626009b67c5f072776992e527a95c81787bd717c19b908a53f45c4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109120 Malicious code in stewart-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3254f3c7cf8f3d0c99eae5dcfc1049a9e458f7da8ff334532160e12363a0fa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105665 Malicious code in mathews-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bed8e0af6e056103de75c1c3972b3f378a4f04727c55ec6632b56dc578601e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103360 Malicious code in greasy_anaconda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23be2b7a076f151fb0447c5b170d1cee9c525feaf205166d7162a7846377c36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ba05cd17c2eb5cd92d603afdd1fffdde2b637f8c0479721166cd586e606fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872080e18fa07dea7947e41f93dd92df2a77e34b0e2a383b3ff356e55eb5e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_toucan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4325ba56e66f01897ee4c2d56f7e5d3f158ac881ba3ba98d950da8e7877fb5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9305d08a0ea5496e87f685475b1b1b9b81ef51f93c27716d389bed20acc2b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...