MAL-2025-112200 Malicious code in practical_bear_brown-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7289b6f8894e10e6bddb8dd1ab890d53e8cbf82e7a53bea3cc7d85d9115df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111736 Malicious code in colorful_lemur_teal-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cba455c61fc9be3378a697bed7e445ca988003dc544bfd0e993067c40327e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_kiwi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c1d7ebfd2a6454c020242e45fda0cb2d043fcd2c06ed2113c2fb99ccbe1da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_dingo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1caba89ea5a8bf3c1433172bb5175475d943f9ef470866e0770c350dca922d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24440c84c3a3231183885bd638a1a4e4c4c3d9ab64d994b4c56476f092118362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_weasel-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f861e9487b1cafb587744fa276ed39281358f3bf1b7170a9ee9bbd8409fd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa473da9ac2c08ab5696327b9acd4c06c0eabc92ebda9a6c11926ea073eafd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chimpanzee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf0e4fbf0d2ece0ccf90aa0615bd10c16bc132ae751a5549c19ec9df1296d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dbedhs-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90986a3f6648e3ad152e050251e36c483d7385e9d2f814a713e70447b0d40c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrimp-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6c98ae211f12ae7a2cd20cc1f19beabeb56f103922381b3890195f197e7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6abdb36e13460e5d225ffcd294498b503ca2f2955edb477459bb5f2f7d1da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402cd394cc93e05d67bada41f84a791f0f803368a1d653817bb971988367cfbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106787 Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107058 Malicious code in petite_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff5472e74c06f71d0dfa0965bd388c1e08f09635cb30eb2461225b274fae99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107319 Malicious code in profitable_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde26b132991696977fe5a2beb2f7dda02fb106e7fd08d4157047a4508c79a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_cod-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022e81d82b49c440d7f7bff80ef97cfe9e2f8d65af92302c4553323361b0817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...