MAL-2025-111701 Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_ape_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa9041f185d1b2bc827305eb9b8878554964c927f46f25ce188b63965d50db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_koala_orange-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d11cf6bbd94c0329bb007d7f4d796b1e2d4b76197a1676fc359da49afa1d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111740 Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112188 Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogpkyi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a79114c7a56815a24eed639913abfee12a041674ad471418af9503d6b88cef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108452 Malicious code in seblakkuah15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c14bd83430162cf82a7cd3247c9075e54fbe6b49403c29567a63c3f46282ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100881 Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102274 Malicious code in eventual_hamster-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f8eb01746e33fb80677ce4346a0994e19c9333911158d1b1e3749ccc1eb7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108891 Malicious code in social_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf692dfb1b6c534ab3b39ebe4ae5a58b5f1867dd98ee9453507931b099f21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_bear-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fbea7dcb8087a54d89f3a23143447e3b2a176d772def5fc9abe48d0d70e620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8c52ac1465aaf930b7996fba5b8ff8eecb88864ef39ad704f74fffec3f04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_lion-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b6c70e814f88ebb124b15663b9abfd718aa33c770cfabc2ca4ec5263696fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...