MAL-2025-118481 Malicious code in zonal_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf8fd8086f74ade44999823c7ca4e51363900eef66618a802fac918c6ff5dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114850 Malicious code in irma-enting17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85f59764b28ed43c8fe37cf5750c3c06bd7cc44ae77ccecc33bd4af6d499b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_lobster_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21efefd45db9af7eddd4266ad0cd91490c86d0c3e7d4ac900419a890d8e0b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111645 Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73702b74c4f5f09f9811fbd61c1b3ef5ecd1e7a15e90f9d1bf88a54ef23e4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_falcon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abfd9835d42aee4059292808256b925c26b310fe5e2ead54455336c5f1f4557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_panda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af74677ec235aad8ecd37e658fe81e2bf6532ed6f0e24ddb663473a75db3057d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_grouse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f82166482c28a4efd75fea752d02c7d12ee91e98332816ddaed57fed05ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_silverfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c482d95de0d51eac8c9b1f1f294153ce242e4df82e104afde3f3adcfa3b69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104571 Malicious code in joint_tortoise-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7afc830d97b4223672736285f872e1ea1027549471d17fd9bbb251b0d1fdddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111364 Malicious code in yummy_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7906df8edec2d798f7cc0ecdcfb756af4f053ef6c2a99e153b08793197323f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101132 Malicious code in ctvhuc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea243892493a4c55888c40003f4e966d87b12eb127f8e44153b0f2b4f7388a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106887 Malicious code in pale_wolverine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04314ffe6c86e568cf3a56b169eca545e6a20c77570d54bc34a1b457a74de436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb9c4043097040a8880e64a1992a742486684b63c1230279a88f8c2b1128aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eeb5925f5c93effe51c14692d5cdee5d038fab32bf030db31015322dfa2f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b62bf97c952b6bc5990ff43ff4ff141183cd4baeef314c416c7ef828464a90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...