MAL-2025-101053 Malicious code in creative_boa_jade-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f27095f55d5f6879dcbebf5a717faafdbd92bcc4af9d257d94c6f113f4907b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109583 Malicious code in then_ocelot_lavender-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44619ab182b16e7434fd13b44abbe52d1ac90a05bb65ce02390061e52580646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99233 Malicious code in afraid_galliform_violet-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4128e3255f27c901eab6c31826134b7e2fcc4b9e731ad5d02fef415c24d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103809 Malicious code in hot_junglefowl_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6056859bd790f17f4d56d0b43bdc4c65cad92131a4c269a767b5df5b48c353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111234 Malicious code in yappiest_crane_apricot-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb477c128c1bd47ac3efae5d12fedfea4fa25c296655518bcecdc75c903bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100760 Malicious code in competitive_clam_sapphire-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f40f2eaaa18d312e6327112d631bbff63e1ccbacaef701aa846a32dfdba5574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109629 Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107027 Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4658986c6ae4ef843fcfe331f36f8a196ef5dc0a6cc5e7a84c0f13efce11d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db57b0580b850f65852b109d1d841989305efd79524f60c98250aef8549d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95172ee6b19ad22d9cbf9fd7046bbfe88218763caa930e4e2b69cc300d813216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c792dcc74f5d554e776e61323e92743f8836a0eb469f0ce17486a6d64061d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a46b4234ffff7bf21647a295f0c2646dbdad5b833a58e305ddb949f5455eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102056 Malicious code in embarrassing_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4901a92fe71a3b64a727422bdc7610c90b88bae4cb439dcca07675a5435b423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100927 Malicious code in continental_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0496011fd17a29d1751cde9c1f23c8ad3aab71c205d82c8af22569b70bd2ce82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100555 Malicious code in civic_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58ad17dbb8155e0ce071e31eb382d62c6d0372849f4714f350b5b624ce072d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105363 Malicious code in loyal_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fe0fca3ff95f1fe3a1cb3a6eeb1583ce322e59e583b7f4f29822d1a528834f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf4fa15c0393e6521ccf7c77386c20894ed7b5163b483e0de10a6200945c4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...