MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_cuckoo_aquamarine-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a7d92c8b7a98e3de2923f6a0c87c726bd42f4eecaa3a2a00707c1d35343e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110096 Malicious code in unexpected_ostrich_violet-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bc0c8eba8c186b2a6420ede56075d1c62f568cafbf12724c755833c75fc3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1349e088701d3d5d03168b18b4a56b1fe2a0dd14f0bc132aefafaeed85edb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110043 Malicious code in unchanged_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9ed17431d83661329d37ae5ed5962ba253f76d41b556204eade6785cc26c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9773a2dd78172a0701ad569c2480b08611e8e8916b0c9039322b9e49eccc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99579 Malicious code in arif-oblok34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec21766b002c2164498b6f91fcf0f18b8aa19d635b1cdf07e991fd65512de96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99417 Malicious code in andi-bakwan76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b83a9bc44b82c0a13f1840288dd8375f7debde0d0db2f0b85d06c9063867ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108362 Malicious code in sari-kue93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539ee99b019b9fe38ec374bcfeae03a73f446ef289090093990ea1d69481d470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101028 Malicious code in costly_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5c0eb2851440aad34f6dcc38912f6cb315e0b27dfbb1d0ff6d958da288140e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a506fd44700f1d602dd8d67204c2cb799f713e6e2a5ac7c7639520a97091fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38f09125ba1c64fdd3f1562b6b1dc34bc9cb776f402f61f1dfe1c62f01f8ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94025 Malicious code in digital_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20561854b43560622feb037d01c3ae7a3c1a0a5f39fead72d47eebea5f3eb4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96859 Malicious code in sudden_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c7119207225c9c6c6b76a4c979faa28e7bf0ab02acaa4356a36144b3a80da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mieaceh13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2efd4ec2d903a467de6095d8e7a05fd029f8b17221559aa6f70527346b9ac19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8750fd8a60bd3b07e8120a219b917c8dddcf130b7c26f082cd50775ee3f6d610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b71d7f2b31267d129a6dec37e6daa0562c0bc84ea202ea15849573556b0233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue92-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1352fbe320d42edf9b9592b22f0e006dffe8221953862a418b9b85ed96c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...