MAL-2025-112353 Malicious code in statistical_bat_fuchsia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7df6285d74c189024fb19547af3113b53a7794e1fe8e903d4d5992df8ca90b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111676 Malicious code in automatic_puma_red-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687227385f1b331d50c0cdbf26c9e95df4079e0b2f6ac21535439f0b98ce38ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_cat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c548b36730787debcaa41734d990f52a3930c57b04a3fa8aef4ccee697e44463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_wasp-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc3138ee54dc14dbb201e446493dc532dedadfeb84979db9e4f99da506a45be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f244f42b656074eea86a669f56c91fe57b941f61d5fc138c97ad1108e9f5f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hamburger-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be2670992415031e76004125aa39c7e115e55b727782e5232de11ff9d4b9442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_pelican-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4a7b6b9251dfd98d21ab8b6b006b3d72505ca5fbb139bb6cd16412ac433d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_wildfowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f764ec93889876804e0180db02a19c5e486e5b468020db1b6fcd1c7995a28343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109425 Malicious code in symbolic_chinchilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9372bee49931fd2b6f9909acde70a29246dd2dab1a73759638da43a0d3596648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105338 Malicious code in loud_yak-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6d1e82b599b5342c9d4d33e7079dfe1a9d915870dfd415f9e4fdef35baab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108819 Malicious code in slim_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed8021ce11d369fc8ac6f38335ab1be774b3b8244f51f4f36bc09d211a90add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110643 Malicious code in vuvrcd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9256caab6c07ded506f8226bf4c4b6f647914a5af0773f522a6cd2b337d1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109818 Malicious code in tremendous_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9958ef5f751ef26631ec53252076fd6018b50d1c0152b0dc1f573fbeb006e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109338 Malicious code in surprised_chicken-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789e50becdcbda7c1dfa1cf55093cb71e8303b1b53809995999104b4ede6f81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_whale-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c505f0bfe391e83140d9b5fcd9aabaafb7920220472365d4daa54ad08bc5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_bedbug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5349fd641b7fe33d41d105228f7ce90f9a71b272d5f55e4b11e8df94e5efaf13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_bandicoot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7aeb0fa3c4731b7ead5e36d40c88e56caffc383ee50f8ee04dc7753eec00f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...