MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2341ab0ae00203296bc3620b239ac3dc46eb0feda63d20eb29e7768bea233ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f204d82b53f3e63fcbd497b88c394ce32de0ce9a24ff3511140dd0526a3baee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_tern-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06650f71b5c474ee8723a732025cb0dd8c5c9a54b89105eed7b347ed1f86c7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe96693ab379d9c6bfee4c72e529a607e0b290daa2804c3be6ad44b837e3dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_loon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5887c9c50de8df2fd880d6fe7e199519fbb117aa5ffa10776fe4c8171ccaaff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_meadowlark-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e91abe543dbec0036b1d62fecb494ce9933c7bde658aac563c28b7be6151e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46638b364b016819fce859a948086ed838b814930ae43a6c253d91db1820cf83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863af8eaae2d469ad7387481013fcd62ad91db92ae19ff5e9bfd08c2e695c0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_crawdad-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c8ed1f74ffe168227255d4d3ae3a972462e0a45435efeb368321f25196a1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f99f34488f25ca3c79687489f538c769f20a991f209f0e115b4b2856b2cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109860 Malicious code in tuna-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11aff4df951317030df43414b9631974d7920f314f6f66d7f220c72f04b978e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104334 Malicious code in interim_kingfisher-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d7130bc05163c7018e6ebfef577ec308664b8c5eb2f571390d0e6bbb4f0f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100057 Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99701 Malicious code in aware_donkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c27af153772bb84f749e05af5a75e25ccc5e3c8b296046a0a3c843394a16060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99939 Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...