MAL-2025-112421 Malicious code in underlying_crab_maroon-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc326abd21bc3098bb7c74ee3c7889504221b624231163000ede539ae596a8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111685 Malicious code in bad_lobster_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21efefd45db9af7eddd4266ad0cd91490c86d0c3e7d4ac900419a890d8e0b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_peacock_harlequin-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af879680c3733ef56f8a0195f6865d3a7eccabadf2f711ee3f0ad002145ef38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112374 Malicious code in sure_wildfowl_aqua-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9308bd4127015c1721724d6ce1ef9984bf305b72870b7b890a812f2479666e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_whitefish_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbd6f8abf2d610f9c7d97cfc7962646ebe1cc59fbd8d671c827798169b4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_barracuda_peach-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889d537975feacdab947193e8ab585e7ba742d02a8313036dd6e669307414436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_quokka_blush-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba80562c5187a0cb881d201884188fc0fa7073dd56e3fb872701acee56d6924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_manatee_silver-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dc540111448ac9e773fdf9f2ee2968751861ccb68f208cb7b4d7d85cce0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111635 Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112111 Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_lungfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd5de49b7dbf2d67a7fbda39df79c6084651c9066b882c4ea9445c5f31cad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_worm-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d1d0e9ff135c174dd11d28cbf4b1b4f137a22f8c48263e8ceeeca4c7b8d3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...