MAL-2025-112095 Malicious code in minimum_bee_sapphire-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f658b25800eadf90b920958a64ee863a4b5d6a584fb033be800a5f6c28bcfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_wildebeest_peach-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5692ce1cb6a0df9b829e12d271d475be53269e62c483fe5e225763da3a2ca95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112499 Malicious code in zoophagous_rhinoceros_silver-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d594c564e03d9485753e700809620612a45fcf941cca94cf9cf0b1c9cfeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111770 Malicious code in creative_anglerfish_brown-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5964f73b416e0c23f7895847220fb2fbd4276ebb2a8e2f2950894b65a67347af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111700 Malicious code in brainy_chameleon_red-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f182d73994c4aac8a2ba725bc04d510d6133b5b75659542e4b1bb145404b42ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_manatee_silver-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dc540111448ac9e773fdf9f2ee2968751861ccb68f208cb7b4d7d85cce0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_haddock_amethyst-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7e54bb46b39250c17677b3a32a811d7d64db85f602f6fafb86a0c2c3d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quprlz-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cc480d164e6f90124cfe73a4d3a552d1252685ba145d0ba4031bf15a46d4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73702b74c4f5f09f9811fbd61c1b3ef5ecd1e7a15e90f9d1bf88a54ef23e4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101192 Malicious code in damaged_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98809bf19c8331cc90a45fcd76372a565219999a59e96c6cba2286234b439ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeasatra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a7859eadc61dbbc0a46373d28b0a6992d0c2a3cc8bdde7d89d6ea1ea45d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101135 Malicious code in cucumber-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9469ff490246fcdaa28a7eb4f8897e226d47ff6afac1230a30c84c6d56fbf4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soivop-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9866bf5d33db6690a3aa08e0ef9d11079ec390c8aa8d80885b036460bec827f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107256 Malicious code in prickly_whippet-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd90f250a331a33ba5dff7ecde2167dcb27a6b933ca8470c3548a7b4601e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101607 Malicious code in disabled_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dab1dfa837847e64e70050db6ccbcb7fbb18ef63c85c50f8f4a606ace9c87c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102019 Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109807 Malicious code in traditional_salmon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cda9a098144801e5888f41ce0ff37937766b78870d39f2e20ef4b4443e3cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99216 Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...