MAL-2025-112494 Malicious code in zany_mole_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d988fbb16a7f6c3650c4cb970b298ea70776e441ab478968d56e313e2849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112380 Malicious code in systematic_gull_cyan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ab789135f250a1f79402633968108a09b4452da40f27a44779997411d2e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111970 Malicious code in helpless_mole_aquamarine-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbc7862f706db4e63fbc7bb43a277d0afe160854b6e66b46b35382b322e3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_deer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ef1df1d35118399cc158b32ccb5233cb74f1839d92e5d188c3c147dc324ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf59120defab5438e22f07e4716dbd221265e56648ca7f079ecf8c33aa8ca17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_llama-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeccb3a3a049dd91e5b548558535ebab1dc2dd29793b4bc3c24e8367fee6a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04734418129c6bb758e33c147c4d1e55dec10ad66a5c047fbd1fe4c057d4a7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105907 Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106885 Malicious code in pale_horse-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e759240f4498bd947dffd1db436f1ec4344498e58e9c5162b8da111b1b462b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_pheasant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4014647e547d44ea9456defe345c65c5eed1a1399093df7f1a81b7cae10e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108662 Malicious code in sick_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214ccddee4d1e337e7992da2ed0fa4c6038060ca84400d65b321e083b9f55992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...