MAL-2025-112409 Malicious code in tragic_haddock_amethyst-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7e54bb46b39250c17677b3a32a811d7d64db85f602f6fafb86a0c2c3d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112288 Malicious code in separate_leech_indigo-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d019b3e20ff49c0da1111a6f950d0e2d9fcd93ce655e53d69dd119e54aec68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112114 Malicious code in mushy_mongoose_harlequin-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d515d7c1e6b0e36ad8ba1827a48371dad7ad5699aab0fd9fdaff6b5f2a93f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111992 Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112206 Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112116 Malicious code in mysterious_tuna_bronze-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d28924dbf0dff394b4b6a4968d373102d1254f9a148adfd22fe4b13387b6ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111862 Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112238 Malicious code in realistic_crocodile_gray-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c7b145756f311b40476d21984b89b191ebd77da82a79e73dec1c30cd40486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112484 Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_pinniped-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3d851c3d27a3e1b275591e8a4c0605f1d68fdbdd8a16a039c312efdadecaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b3fdb879220b2227ae025153329be1b04aaeaf884a505a8cbbda4724d10756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100392 Malicious code in chosen_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b8d514e5f44a8b5eaf985728d0f80fc28e0f95bd2dbc4e28b15c8327e00260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...