MAL-2025-111922 Malicious code in friendly_bovid_maroon-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39b0751940385b72b33c9a9e38122e938eeb08eb14014a5ed1ab8ac608bed2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112476 Malicious code in worldwide_sloth_orange-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb00598100403a6a021a88a880d661ff4c6d88c2251feedbf16e6b6804eb8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111674 Malicious code in associated_quokka_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629fad0fd8df97e4bf5f3ee6e1f528d98281d6db69b325764ca634fa5bf6f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_condor_aqua-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d24b4c80e846c2327ea9a52f0190edb0a3a97d30b90acd17e4c1420025dc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112044 Malicious code in junior_hedgehog_tan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a7fb89cbff2a092c51eabc71262b2138e4557dc0d4432a5bb68d8aecfcb770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_felidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3105666e5013a45815910d01bb64904f0dc79e3837ff0f3b68830fc213cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_pelican-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4a7b6b9251dfd98d21ab8b6b006b3d72505ca5fbb139bb6cd16412ac433d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d997ed3a04676fb91c37b31bdb10a836b2847d9dde1527e2f91f9de410852a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105646 Malicious code in marxist_sturgeon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5744873204580592871c4fe41b504defe00fbc009c7cda54cd08c3b52fa0f210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103073 Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260677c4a9bd4cefdfc43bf5bcba65e9c7a2b66eeb88dfbf4f8b72b58890d6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_panda-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4441900844e790ec76044e0eea834714093f1fdf5e218c0b8ba31c264dd37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_junglefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d9eb032824f99b375523f8324054e39e245740e39eb10ff9ca84d30a434592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_ermine-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4839531239ae390e8e662a283b886439bb366a8e854d3ac6fd8ff90c2915408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...