MAL-2025-111718 Malicious code in cheap_dove_turquoise-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6252d53e66cef20673a50bec8087c2d8ecb488d783a419c72377272e66df68d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_ocelot_red-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6666ab1a876fea822d1dd932b417e25522972290488f2a615324a7536f37a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_butterfly_peach-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff2c204ebd711a672ac0641830358f79d1d336b1011a53aa4eb35bc88bbedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_haddock_harlequin-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81624cc61de0279de2a2e40826a7d59850a289bdcf7831e2a88517671b282c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_moth_crimson-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec77cbfec95aaefdf6932d0848ed4a0dbe938a0793d0c67b1a71bed2a8e4ff4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111748 Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112203 Malicious code in presidential_newt_beige-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b629ae67b7f95e41ec455677db62c6bb365ae62011885aa59ee6b0a4ac255db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111692 Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112188 Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_rook_moccasin-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50911eb79ed1b70c5b5001a6996d2f023558e383e3482d819f0c4d3c62dbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863af8eaae2d469ad7387481013fcd62ad91db92ae19ff5e9bfd08c2e695c0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_tern-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06650f71b5c474ee8723a732025cb0dd8c5c9a54b89105eed7b347ed1f86c7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f204d82b53f3e63fcbd497b88c394ce32de0ce9a24ff3511140dd0526a3baee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46638b364b016819fce859a948086ed838b814930ae43a6c253d91db1820cf83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_meadowlark-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e91abe543dbec0036b1d62fecb494ce9933c7bde658aac563c28b7be6151e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2341ab0ae00203296bc3620b239ac3dc46eb0feda63d20eb29e7768bea233ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f99f34488f25ca3c79687489f538c769f20a991f209f0e115b4b2856b2cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...