MAL-2025-109067 Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109583 Malicious code in then_ocelot_lavender-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44619ab182b16e7434fd13b44abbe52d1ac90a05bb65ce02390061e52580646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105203 Malicious code in liquid_orca_gold-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04734a0026a409ad2e22abb6973b46e101bfc70e8b0da1089b8f0bb9adf8c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111234 Malicious code in yappiest_crane_apricot-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb477c128c1bd47ac3efae5d12fedfea4fa25c296655518bcecdc75c903bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100760 Malicious code in competitive_clam_sapphire-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f40f2eaaa18d312e6327112d631bbff63e1ccbacaef701aa846a32dfdba5574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103809 Malicious code in hot_junglefowl_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6056859bd790f17f4d56d0b43bdc4c65cad92131a4c269a767b5df5b48c353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109629 Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107027 Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4658986c6ae4ef843fcfe331f36f8a196ef5dc0a6cc5e7a84c0f13efce11d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db57b0580b850f65852b109d1d841989305efd79524f60c98250aef8549d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a46b4234ffff7bf21647a295f0c2646dbdad5b833a58e305ddb949f5455eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf4fa15c0393e6521ccf7c77386c20894ed7b5163b483e0de10a6200945c4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95172ee6b19ad22d9cbf9fd7046bbfe88218763caa930e4e2b69cc300d813216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108491 Malicious code in secret_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d702ac829b6418c29a939fde8ad17f1d5cef066d032289ffb9b07851391bde68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103578 Malicious code in handicapped_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3997d189c0be279f977bb43de993d7c1b09bfbcc0418ce1d17f727eb144a9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108593 Malicious code in shaggy_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88479425a7a3afc1a67a43641464827433b55fdc0b426c5b170742a55fc1841f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100927 Malicious code in continental_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0496011fd17a29d1751cde9c1f23c8ad3aab71c205d82c8af22569b70bd2ce82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c792dcc74f5d554e776e61323e92743f8836a0eb469f0ce17486a6d64061d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...