MAL-2025-112245 Malicious code in registered_bobcat_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f58df1a449bb543c399daf7ab0f0fe5873027823aefda909c8b26432f43323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112100 Malicious code in miserable_armadillo_bronze-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0631d6afb0be8ae664400e40cd94ac799833ab6ddd259bbc61bdebe9b08345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112394 Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112342 Malicious code in spectacular_wallaby_maroon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d558caad0829bb1a0cc2024579dd3a53c67a2a7a03797aba7e9893775f2725c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_clam-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65cfd916f356a80cc3555b3d44b7e88608cdc3a60a40ea4291fa14456c5385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_antlion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684517f4647fc66b983a07270c875a3bcf796e30cde9486341dd178106a6096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wzkbyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3edfe1862b623962e1753b2a82dd75182c5fe7fab54ce47bc79ae367ae7285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_mongoose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f1405eff71874dd19e72453de43f72d53b950acff822d5e410413d02f8cb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729dbac887325a67e5530bec1db64101e12662b2aa46fb5bc17129b1c4adc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_lamprey-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587290f0d459313c33c017268c63ccb89fdb6c1edd4fda7decc1fc82d964a167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affc4b1fd995e21cbc3726793af8b90f1ea83db51b0c9b939f78d8f2ed831672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_marsupial-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406d8ca0a59370342582845d37a2d3a3ceb71d688d02cd1f33411ceea0cc9381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9958ef5f751ef26631ec53252076fd6018b50d1c0152b0dc1f573fbeb006e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc37128344b98273f1b26c2ec4177469369d75da301a610db68fbef80b6680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...