MAL-2025-112396 Malicious code in thorough_bedbug_tomato-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63aafbc84a4e5dae63769376b518ee2bcd812aec5d429ac7d7685fec368c15d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112421 Malicious code in underlying_crab_maroon-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc326abd21bc3098bb7c74ee3c7889504221b624231163000ede539ae596a8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_goat_teal-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa95b2fcc03614d9d2de030e661479fba6319f913e26a945dbc78995cca4555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_peacock_harlequin-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af879680c3733ef56f8a0195f6865d3a7eccabadf2f711ee3f0ad002145ef38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112374 Malicious code in sure_wildfowl_aqua-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9308bd4127015c1721724d6ce1ef9984bf305b72870b7b890a812f2479666e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_quokka_blush-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba80562c5187a0cb881d201884188fc0fa7073dd56e3fb872701acee56d6924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_whitefish_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbd6f8abf2d610f9c7d97cfc7962646ebe1cc59fbd8d671c827798169b4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_barracuda_peach-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889d537975feacdab947193e8ab585e7ba742d02a8313036dd6e669307414436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_manatee_silver-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dc540111448ac9e773fdf9f2ee2968751861ccb68f208cb7b4d7d85cce0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111635 Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112111 Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...