MAL-2025-115691 Malicious code in main_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0cb7b2f12a77af21841835bd3d9556f646c178a8f3c2a7b0c5e6435695b6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112556 Malicious code in ade-sambalado75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f09e8580b43b4866163ff32216a1b158e5cd9ffa13db95dbaf8c0938084f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117762 Malicious code in valuable_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6af08a8e039811b2b26a6973c36693758ac0587dd5546a876539026072206c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_capybara_moccasin-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb532397b8991ba2299dd7aa45f7c02d5c541a0de36c8e726f5760e675fdecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_fly_indigo-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174046672a2081952420f4047163df0f8bb00d2a46c5f056264f072d46a89e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_fox_white-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4579e3e8d697443cc962014f8e0abb27813f2527d49d139842ca049795c43bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_limpet_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c02ddafdbd5f611fbf67d082c7c31563566d326fdb85be657883f27dd15c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112186 Malicious code in physical_cod_fuchsia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400615dabde579335ba4490cfa410c47d970407d9ad7bfb878a14a19b37df938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b239c0fcc548b9095ef74c6ae051462c9c045c419e3e8f4dd4e3a58868d02cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99499 Malicious code in aozalm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0dd7b59ecf1f15dbe767c509b6473e3031a1646e7ab210738f7e55a4a416e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100000 Malicious code in blank_snipe-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483bb8dae54384f79b012e18616c47eab8212cd10d9b1b134762bf6c75a323e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102380 Malicious code in experienced_giraffe-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744de9ae649624eaae375c23f6053dad9fd0e14dab5e05877cd290a2c75d29c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033d640c89638d58f08e044927d44c7078fc57668f828604a9e92a566457811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102671 Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uathal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52b70d19ca5e35a5401145edfd43e4533d8a76962a54e6429672ce81edd06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdfe52e88030454d65787adb3359e0ccb7640aaf7ba5098802ee69c2860c542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37575cf47ec67d4b453b4fb287507572be1521bd1fa9c3671216b0f471641a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...