MAL-2025-112332 Malicious code in sour_ocelot_cyan-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e105fef9fecb7adfe032ce9d11fa9057f49be23f6ebc470e290bf3e05302421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111633 Malicious code in @awee1233/tehkentel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035e2114a3dde01d8795651b3e1597681379bf8aa43663b64f15835057d0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112233 Malicious code in rainy_mongoose_tan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ba6bf02850a23991134e64d4de8be27492afb976d1c1fd662836c424ca52bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_meerkat_aqua-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccb81fcfcc08de2a906831b62bd334313d489182d7522c046d9edf5c087b13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_aardwolf_tomato-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267be77a77518784fbeb67a57aeb2aa51861a7a74d0ec8a08f3bf655fc29e366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_mastodon_moccasin-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c20ae5a29f0c8971143df10694a4562feb65863290de64df985a444db540cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_asp_ivory-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45725ac2914a1a152760b84f4122dff4b1148c941f6b8dfe661afb5a72fa8680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_tahr_sapphire-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c273f6ee087ba3464e7f5c24be2bf5fd0c0fec12bf83895a652cf85824295e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_mammal_aquamarine-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460b4d96a2825247f9fbbf1598abc07e26a2b849e6459adf271eb2566eb9b3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_chicken_violet-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe8a687dfc486e523cfd66eb4f0ea4fbf0213c285de8b3fbe2cff81fed91d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_flamingo_magenta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8958bc46eb7a35cc67f195654cb2a6ada99cbbc4ae19ea250485cff220472e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112269 Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111788 Malicious code in deaf_swordfish_amaranth-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bc4062a74c1f4ad0754330964fd8fe45eab881de0eec6a4aa912883301519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111763 Malicious code in convincing_skink_apricot-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7904aa0d4c12b3510e268cd4e0c0a60c619819becb2135db4255771766628721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111743 Malicious code in comparative_koala_gray-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39211ebe47510c492b782b320da6dc12ed878ab81ee702328088f564a9812e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112468 Malicious code in whispering_mammal_aquamarine-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460b4d96a2825247f9fbbf1598abc07e26a2b849e6459adf271eb2566eb9b3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...