MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112238 Malicious code in realistic_crocodile_gray-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c7b145756f311b40476d21984b89b191ebd77da82a79e73dec1c30cd40486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111992 Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111862 Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_gorilla_blush-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baff912a9537343d75fcea89d3541e4b2fe5ab1286ade18cb3566638e6b20722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112409 Malicious code in tragic_haddock_amethyst-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7e54bb46b39250c17677b3a32a811d7d64db85f602f6fafb86a0c2c3d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112484 Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112116 Malicious code in mysterious_tuna_bronze-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d28924dbf0dff394b4b6a4968d373102d1254f9a148adfd22fe4b13387b6ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112257 Malicious code in respective_wildcat_silver-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256ad5424549083847c3a06af1dad17121a78629c2048a2f61efae64b841bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112206 Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iixalim-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43bcf4d0be1f1051e4047a1e16336aa80900149f2d39095c2a019a985c829cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_monkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e1dec8d809454b725acaefa12939f802e50f1014d4cb48e952572e8259cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3964d672ba4112794b44ad0b94b474f5341ae5eee62e13710b3f935885223157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b325d88c4510ebaa649ad2731472a10bef178b2ccaef15a53ef27a0c9318ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scallop-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8386940850fdeafa9e69bd386e5a2cf1b2dc851a2d15f27a7948de3cab55e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_earwig-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc041bbab6edac657fc6da01fa4f28776910f6440a79e5327b446f579ca55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...