MAL-2025-111740 Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_koala_orange-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d11cf6bbd94c0329bb007d7f4d796b1e2d4b76197a1676fc359da49afa1d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_ape_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa9041f185d1b2bc827305eb9b8878554964c927f46f25ce188b63965d50db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112188 Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111701 Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102274 Malicious code in eventual_hamster-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f8eb01746e33fb80677ce4346a0994e19c9333911158d1b1e3749ccc1eb7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109572 Malicious code in testy_salamander-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935b2c46e8c183205a2ec07054ce8ec6ac6f452d01e90784b55977c9d406a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107063 Malicious code in pgaool-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ffe74b96d7a953a11c9c62b0d308901f3dadcb95db427f9c068101abfbc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogpkyi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a79114c7a56815a24eed639913abfee12a041674ad471418af9503d6b88cef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ujjfzs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f818ae4f5720e4181a41d302d556dac4bfa23f1ba57d454f84704273038b5fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_bear-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fbea7dcb8087a54d89f3a23143447e3b2a176d772def5fc9abe48d0d70e620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jczmew-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c40fdd38c5185b00c7a61c02ed38c29036353cad2d286984f0c7d46fb65f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99279 Malicious code in agttrn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25517e2db6c7d9bfdb73c51f57e0c25c6f3a997db815492dacf1320f6b9fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100881 Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...