MAL-2025-111827 Malicious code in doubtful_barnacle_salmon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ee7fdf66e69895d63d1835295cab226c1ef9bf4a10e86f9b6d6d61bd1a4ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_tiger_blue-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd79244402cef83abf7c7b5d3635558d6b2fb3b096d1b8d9c559c9de6dd968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_crayfish_salmon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bcfbbc84d91ab8425e4b72b315a44ba74ab94f8145c951cb4df68e0386d0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_haddock_amethyst-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7e54bb46b39250c17677b3a32a811d7d64db85f602f6fafb86a0c2c3d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_roundworm_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9357384c4fabcaf0d1cbf51c4d1f022a63d0e8f9317e1f8813a9c0d6e497a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_locust_jade-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ccbdfe041e861498ac711137aebe41777c4a70d14ba81426d54f00cf300fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_sheep_pink-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489ba6b5e6a4eb2efc4c57a5579a6d13afc35ab9c5ff13f633e2d42ffaf77267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_anaconda_red-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3a777a779c28798c0cf8c7b34e21b007c216da4025a072fde2b5270a2c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112128 Malicious code in neutral_hoverfly_maroon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffea684561b1537a15ce73edf95474868d8abc4c5439460f0f7988d18b8978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112186 Malicious code in physical_cod_fuchsia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400615dabde579335ba4490cfa410c47d970407d9ad7bfb878a14a19b37df938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111866 Malicious code in eventual_wolverine_amaranth-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930e5a5905ea4c5f0146c3cc6a7e098b6a573878ad4e0bb0a91242956b2f44cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111837 Malicious code in easy_jackal_amaranth-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ebefa0146d1321ac9738a9d1736cad89fa597eac5313d0a7b5b799cc96e4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112056 Malicious code in lengthy_mite_gold-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0c2e131ea562a6017c6064609ccc0456f379bda8c886fb32bf3aa9808d8ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112301 Malicious code in shiny_quokka_blush-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba80562c5187a0cb881d201884188fc0fa7073dd56e3fb872701acee56d6924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111995 Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112121 Malicious code in near_canidae_olive-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f2f5792700087a182fee16fb9773d11e538f2c39bdacbb506fdae01adaa225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zrcvyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c60d75b19ac41ca8677d09c9e2a9080c7b60a6dfe2d10a6a5e497e82a2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_loon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d0b033497d43c8446f8a697d320e3c5bc596f1fc79dbf9c74d79ea1e7efed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...