MAL-2025-112028 Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111997 Malicious code in ideal_crocodile_blue-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbe37fd8090781a3917f769fac7452ff529d0dad306029ac9cac0a7e5e407d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112494 Malicious code in zany_mole_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d988fbb16a7f6c3650c4cb970b298ea70776e441ab478968d56e313e2849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111970 Malicious code in helpless_mole_aquamarine-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbc7862f706db4e63fbc7bb43a277d0afe160854b6e66b46b35382b322e3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111950 Malicious code in golden_boar_salmon-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6221ef9a415ea6a5b2a1cb58b4029518e596da5e1871114b9dfe14f1b8e66f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111764 Malicious code in cooing_hippopotamus_blush-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1b233edf9bf05bbe892aed745f30d4f5ae1ceb49f9d67c2af4e6f35b46ce9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112380 Malicious code in systematic_gull_cyan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ab789135f250a1f79402633968108a09b4452da40f27a44779997411d2e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf59120defab5438e22f07e4716dbd221265e56648ca7f079ecf8c33aa8ca17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_deer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ef1df1d35118399cc158b32ccb5233cb74f1839d92e5d188c3c147dc324ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcaa95e36e04fc88cf9b332fc3f23c6a4132b7c4cd702eace503b06e7ccc1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_mandrill-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a46efe3116a8af0eba50766a5dc342d81315c22c90c0ebe0efd1b1708a4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...