MAL-2025-111995 Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112419 Malicious code in unchanged_tiglon_emerald-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c580c49249e2af6f3b24ecfe3bd0a32cf75b78b373417b418bf8c4ed6ef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112288 Malicious code in separate_leech_indigo-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d019b3e20ff49c0da1111a6f950d0e2d9fcd93ce655e53d69dd119e54aec68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112215 Malicious code in proposed_tuna_scarlet-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea62ac886b22065fff0951c12f826353cca89d2faa330ae6b898cfad0237f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111705 Malicious code in bright_barracuda_olive-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5484561f4a76ae53be30d7ad52e982d4ca44243ac10535a50d36ea0ed8400977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111743 Malicious code in comparative_koala_gray-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39211ebe47510c492b782b320da6dc12ed878ab81ee702328088f564a9812e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111990 Malicious code in huge_piranha_white-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9956c57c0a5da66e403032e9d865038392e741ef7f23b5509230fead69cd306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112230 Malicious code in racial_flamingo_amber-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07934d707b12f8ab539dae3fa35b7eccbc4cea3302b51be66f7c20278691c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ba786dcf090ce3643cb49cc06eafe04d049f0e15a7584bcaba5e610433cd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729dbac887325a67e5530bec1db64101e12662b2aa46fb5bc17129b1c4adc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_dormouse-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332c0f7b1a916181ab9db4b9af01771cf4ff082521264289bc8e4bc1b5f5f537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pefsas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc8e2dbd88bda7b5243c4f104741705ea8895581f5098e8f646318c781c9272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_salmon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cda9a098144801e5888f41ce0ff37937766b78870d39f2e20ef4b4443e3cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dbvahy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d0505f863ab64fd74066cca585aee329aa91f182e9ae382b378767607fb2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual_crawdad-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3786748fea4f909dcb5b847d405e2579fcaa299e90e016f672a38d090850813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_rodent-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b53003acbb4bb35b93ae9ac8c8f57445984398cb38141a4a82cf861cc1ac2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_mouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93661f6ab4a1d3f7ae647580f55c70dfd3edfb722a7fcdc042f5649174b492b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...