MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112100 Malicious code in miserable_armadillo_bronze-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0631d6afb0be8ae664400e40cd94ac799833ab6ddd259bbc61bdebe9b08345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112394 Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112342 Malicious code in spectacular_wallaby_maroon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d558caad0829bb1a0cc2024579dd3a53c67a2a7a03797aba7e9893775f2725c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd98c601f0f1f3ec534b094e9102aa145f1041cd87045b74e24921f74507656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103368 Malicious code in great_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8be4b6f97a4ef1607cf96d2747c2a68dc865c46f44bb335acc5f11450175d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_mongoose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f1405eff71874dd19e72453de43f72d53b950acff822d5e410413d02f8cb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9958ef5f751ef26631ec53252076fd6018b50d1c0152b0dc1f573fbeb006e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1e6ca3789f3fa915453837ed665e3c6f71ebf9e38bcf9f9e3549ba156fda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wzkbyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3edfe1862b623962e1753b2a82dd75182c5fe7fab54ce47bc79ae367ae7285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_whitefish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa0d57056e3efbc3a105bdb76ebfd473415bccafe8426aa3b062d2f15dd66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affc4b1fd995e21cbc3726793af8b90f1ea83db51b0c9b939f78d8f2ed831672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac6ecb4d6e49713bfa58cbac5c05627199152c28b0667059d1299a6065df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...