MAL-2025-111691 Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_eagle-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995c71084c23e2a26e695c8460ea4ea2194a2603edc60e4a6e363961d7e72d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_mammal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6d25d5e3a458b3896b66b0b70b98273077f7b310666b3c3cd6a6cc1dd853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e2310300bb3f721ed1be222175ab9a2f6e228573808e8f59e0247a81b95f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rlwqqf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee43cc2221f039243836c072a41ba87acc4d1639028c2d1cd05b69c5cd82c2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9d50f74e68366232d02d52880ffde7ef821a03f669e20349ff1ae1dfd4a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4faa781c8e89615343ef184a91a40d10c998aff9b31d2d97e347d598b22a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_minnow-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a79b09efd8ae248af692d81fb67fb2e9f1f65d5ba88e94fa3e09dc6b917b67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106213 Malicious code in ncsfhel-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2d2d7b461cd71b4120ccdc8b17d83488cc25782a9684bd9ff46a3cb8e4fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_beetle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc90956f95995e1894847973ee34a6b4fcd367254aa1bd04baafb4c62630b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b48ab3ea3169a7dde866b23c52c5acb8357bd1d5543d831f871d22b87add315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_peafowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52089dc9c17b6585081885cbade286b0c02358a37ad72fffe1bb4a83e976ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d184567979ce47fa0a8a27d0e5c59c6692d948a8a91567c147185a921251467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eba1cf246b221d69c6597e7e90afb5690b0f4722b51f55988a6392608c67db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_mole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8370273611d85cc81887a7c2a3151dbd510ca4e194a8647c004104341a43935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_dragonfly-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b2181385eb28852b2bbd8e2a40c07397e3eb4eaf312fa0774bbb7c3b728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_tick-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b7e9a95960a7a8f58c088e94b74acaa8e54f48590b3849b2f11603932bb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110571 Malicious code in visible_leech-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9eebb94601c57a97564f808bee3edb612dab9216d66567853199ce6cc832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...