MAL-2025-103790 Malicious code in horizontal_whale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adeda80a4911a42887015cd052e63dee21e747e338f0ddcfd8f344f0cd772d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102659 Malicious code in federal_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb395b296a2298b678c80bdc0d1ca9ae94575d09de7e0fb1432c73eae3af22bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102745 Malicious code in fit_earwig-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff584ab416b75895231370eb6f0ed4947a490dfd192731d7bf1b18844a8f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111033 Malicious code in wowwgt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffbc235336eb834b7e210710b2e09f2a7873a74c39ea57f33cc16222ea77509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_impala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a51254d0b51da255f2c96a15b26eee918b6571cc15c59fa0f3459495d914bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9a2cfe217a93889d90c1c5185b5647e57c9baac9ad036aa2232ed174c9bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107729 Malicious code in rational_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3101186fe93eb0058c55e50ba8af0a951b0d282eccc20df904d2a840b7108c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106873 Malicious code in overwhelming_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9175e0cf10f5ee62178cd6e1956173cd1c9a2e1ee08e0d3838a0e891180fd199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_ocelot_lavender-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44619ab182b16e7434fd13b44abbe52d1ac90a05bb65ce02390061e52580646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107637 Malicious code in quarrelsome_earwig_white-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8034e5f8bbdae060a640ee74c92dc2ed18dbd9aeebe61cbb76c43c96fb9136e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102880 Malicious code in fortunate_harrier_orange-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474890c260bd4bdc1c2a7e91f892ec68d2c478d655829d9bd46f69075232199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2306b59d3bfdd5204e37669c4da188ef16ea0323139f5aa5201007540479f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104003 Malicious code in important_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc465b34242cd51766998c84c9e05653f5229728632559117584c6cdbb162771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98afaa18881450c30c69bb9905b73d3f2871ae8a4829dcfdd3d55de948799ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a527d3b468fdcc275d23d67c92277eb5d4a172689fa637b0cf2c5b6b7c74c04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101585 Malicious code in direct_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cfd1e71a8d20fd032e9ba6867adcd72048997339a5b51d769e92d0248cdcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cd59dfadd65c619392066ba184b74bd3f8c574a2650e77f490f4a4dbb5601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a813485400ace25521fd04d01acc92f8017454178a605696c8ab81a2cfa65c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...