MAL-2025-117683 Malicious code in uniform_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fdd14b6b222801bf102c1d1efa955c431d95041398cebc757bda6770d7567e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117517 Malicious code in tomi-tek26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd476440750052effb54fa6574c63e69a12b551aace8348858d1d70df1f84cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_albatross_gold-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2c02b741d085abca30b5f07b25e1a902dfe3bcffbdf4e751928be1eeba68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_newt_black-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e699bd3f8ec9ee4a314ae8d330472bfeefd5ec88b2b741044de347a1d3b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_stingray_ivory-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18faa010f3ca8d66c54218e2d0ce11844129752968cb5c5e9e0956dc2d1d462b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111876 Malicious code in exciting_lynx_tan-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6310422e7bde1114c6d758584d8b650b16aa47aca1513a417b23c8adc0027b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112097 Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112113 Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112154 Malicious code in oral_ocelot_red-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6666ab1a876fea822d1dd932b417e25522972290488f2a615324a7536f37a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111962 Malicious code in handsome_mandrill_ivory-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420d23b3e684607e6cd4ea18ab1ccdedfe400f5564e2ce9e01aa1db38804127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112151 Malicious code in opposite_guppy_silver-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c39ead040d48951309e5d19660e9a7a58f4e8bb7e8e139fc813562cabce41a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_eel-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a927047542cba1ca1350fc1e1d7f40bc73ce4c4439eb1b087b6b4778efdc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in megrbz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c50e68545e93db6de7eba15af2d2b51ef4f93b1c746c85d13dadece3a2786ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104016 Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_ferret-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131d6c39290f1e7a7231601ccb5582b0401eeaf4ad3434bf6d4254e9a3247e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_elk-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f698ee5c5cc56eddedc13a95d5a90bd8cdfe1812ca0c4d8bd0da7d3413c632f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_moth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fae02b697b8f1c200c61b505421ffaf49eb1fa3d4eacb33d4fb166aa7d379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105989 Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...