MAL-2025-117387 Malicious code in terrible_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39d830385bfdf68c4bc83b7c7a271d4ffc3cf98debb12f186aa26e976a229f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112520 Malicious code in actual_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cc458711829ffa4bd8108ac6a90e70d35d827f70546c2adb2c49e21ae4ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_guineafowl_orange-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7252399e3c73bff2213d69c3523815fd5c297aaea95cf3a1616e2bbdc577da97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_coral_gold-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac292a115d9068edd190e8de041e5beca9c7ffab77c2e42752345a85b8b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_salamander-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935b2c46e8c183205a2ec07054ce8ec6ac6f452d01e90784b55977c9d406a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110644 Malicious code in vvqvin-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d074fa02b7e46795c9452c079974e0c843f32371efbce5d0d7d694d7af92311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_sparrow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3500d170789f980c3d15ccef92e3098d7ab8b169c6744ebd0cf1851e1e3d98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853e785b873a6640d02a327b0ec6ea9dd59197901bb184ea3feeecf3422bcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual_swallow-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa7b88e76454c056674ba6b40f07760a0b3520fda95a8f379e04a48c8728c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7caa5ac092254a0603516e1e4df414ae5cbc0f2027e7b1b94f243790853fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106799 Malicious code in original_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fda335f2e20e6a5c4c89e497e81d52bf55f451eb93aa8f9d3234cb63a2d7188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99256 Malicious code in aggressive_snipe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fa9df12e7754978a41d9ad102767489663c182d14c3c4fe597968c093f8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1c65c950441af5556d5f3cfe65da0d8cd4d6ff0de183f97d46fb940e9f3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110011 Malicious code in unable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de65ef5a92b0fb3c8f2e27b24303acddd44e8e0c2d032783a0f24ef3254b91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111035 Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...