MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112394 Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112483 Malicious code in yabbering_peafowl_pink-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8c1254301a47ac5cd6e1dbbac3ad3c561970240963831d3cacba6ce85bce06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112455 Malicious code in vivid_sloth_orange-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ed3ced4da7435380dc2282cb77aca4d5ed7f43563edef27ea4d0874377586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111811 Malicious code in disabled_mink_violet-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01b3281bca965831b272175f2b63f365c2630809a3175f250971c1e1c807601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_centipede-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c663ada18da455d2b28c6a548569d7d59fc16ae629f9d9887102653e3de75f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_bee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e75670d60db612c0f6d078a5ddc90ca89b684b3946d69e28b61ea9cdf70629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500183206783febe0742867519947df9407d047414d70f1adb79e5d18b802c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature_possum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd97bb7e25315553080121e7adfbf66cf03a7a651345703f269afdb9cd8a7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_vicuna-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b060992dbd4caa9f855cd103274521b6588334e6a0432175dc53aa7885422cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_unicorn_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d249e9de57c41ceb70dbe5e716f105543bfbb25aea024248261533cc67cb06e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103739 Malicious code in hmrkib-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd5dc5d1e8a6d3f392c8c9680f2fc96269937dbf46f47e5a57f4d9f40747e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99492 Malicious code in anxious_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9672b0f74585ab4694b60279481f3d8323cf680ec904e5a1f559d9b7cbff951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107907 Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...