MAL-2025-112497 Malicious code in zesty_mule_amethyst-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34010d940b010dd37748bf6c17f7093bec2f519088883f960659894c17527d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111790 Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111886 Malicious code in exuberant_wolverine_moccasin-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f96b72416a55b136129d70ef7ae4d51ed28dacf6b3cec22f2fb7ee8d8906938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111776 Malicious code in cultural_cattle_purple-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b171418a2b4b68948375d3501a72438991993d3ecf6e87bf80a980127f37ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_dragon_lavender-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a766adec22d132f9f52574ef5fb475f1092eef40799c9f8bd0d96685071b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112152 Malicious code in optimistic_cephalopod_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0169e6ecd28c1f903c29cd4040fad0c900f5839bc65f5651f2769418846c826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_chickadee_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5581eecab474db1dc14bb275adae5ec01a9dc0af86d6a4bb0e3961ae2d9591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_amphibian-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb058e9d8c0b2c92940f78f3c06adc9e12b1eed607d92a3acdd75a2fb2266efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613bdf8dd4831c9f4dd47476d71fbb307e57fbe083dffaa8ccb6bd57fdb53b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor_puffin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81118d8490cdeca188db51f9af791ff5a9f39e33e235a2e6aaa57da771acc984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_firefly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fa2c37d824cf4e0e5095c6c3b4994c34ebd747e76481155591ad4b74250017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_dog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9d0fd7ef22d1aeb8f6e047a45164b39bf525ea1ed1634f46c23751ef50e9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_canidae-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c871c5a7fbd8b91e5c67993b893fc320a8c3b3e70f8b3d9ddfcbd5f63c41c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_swift-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d78d0f2668d292ed62d287c43b41e163b59c56e12c577b3d6b34588e19d32f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_baboon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f00cd57e55bbd7f044e7bc124aa8a8d9c375757004fbb1355a178eafc7149a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101781751aa072a0f3147a3579922dc8e7a74c0229b7bfa8b09dafbd5c1b6760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_marlin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc81d978018b3206a2240294e808f2e8bbb44b5d063e715d8b0a7d028b973be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gross_carp-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48730d3ea026f4fadeabfbb3419067ec4e1aaf87d147da865512fc24a7257759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae998d8d9decc99561d48eb4300dc6a8fdeb985ec4f26040a72d67c2b84385e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7da212f120b70944977bd3fa612c8853312ff259a296f1f22dfbcf04fae7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...