MAL-2025-111988 Malicious code in hostile_skink_violet-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b80e3cd4cb6528cf2820b9aa2996c687891ddd57641f0e7d4600ed83eef3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111690 Malicious code in basic_catshark_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61f7fdfc18878a9f3266831e472cebf2e274b6d77527c33a5a95efaeb487bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111768 Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111682 Malicious code in aware_bedbug_tan-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87904b84a31967a52185a2f1be56a54416ea4aa696360b14195f49255b1cebcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db106d49bc56fafb251fc6990ef708d0878ea1ed46bfccfb1c90d7b08cc3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_cat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c548b36730787debcaa41734d990f52a3930c57b04a3fa8aef4ccee697e44463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_deer-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d397db918c7c9262877eb0ce0bce8e8465071dd300ac841b38ef2739f195c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_gamefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6ef35f7c854744e777fcb0ddbfc25702fc2a4c65e062c1f85c649c8da01d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101676 Malicious code in diverse_impala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ded263d14242f26755d7136c35f43314c0cbe75643766bf6f59874e3c070c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99963 Malicious code in bibimbap-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335bcb2d6f38baefc92ccf541da098ce2aa580dbce90f3c9011134527e228877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107882 Malicious code in remarkable_barracuda-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8c5c3c64d21a80bb3b2637dbf27522cd3929c7e65fac6427c9c167ba90a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101647 Malicious code in distinct_vulture-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e87242fba20320f0f7ce67c5ab7dfd7e606a924aad22d9386e24988e247f488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_wildcat-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a56af3102e021c3186d40b81146df6dba44e0238ba239d4de840ef6da74b00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_hare-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2216a6bd3c3cb02157b3ea350350d0123258cf1ce32f62a1d23e17066069dfac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buluxj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2fe3262be99ff88bffcff3d8dc119caea75d7ac57f24a0cdb0fcd19882d9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_meadowlark-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b9004f8275921bd5b1a18436ba470dbb5c7df10d2206ad9ed7726dab438611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpride-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73058e125c03f5d5c8bfcd023f1e0e03ff90b8d3912cc5642090a88b8812ac97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_aphid-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcfc0860f12b9df2bad079d8ef0a1f650b0f989a59339c99d8ba58913c15dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...