MAL-2025-112311 Malicious code in skilled_gerbil_tomato-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a266e2eec9fb17bd8935a811a6184b6eff79504309273ca77095f4fbd04db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111812 Malicious code in disappointed_ant_peach-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87681afc7349d38ccd0d132cc977c3740b158366c1cc4b465f1d468830ccc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_tiger_turquoise-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8724a22e3c77f90444c29fd550e23b043a2dea1dd20d55be2f33a7206e04a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_whippet_beige-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b0797251633faa37229abbd6bce30878c22e2300a6bf32fed9dbee97a9153d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_cephalopod_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0169e6ecd28c1f903c29cd4040fad0c900f5839bc65f5651f2769418846c826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_pony_yellow-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8690f4bb6ad10d962c246874c9e4607064c2d85607705ef997780322f34ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_gerbil_tomato-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a266e2eec9fb17bd8935a811a6184b6eff79504309273ca77095f4fbd04db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_camel_scarlet-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fae818680a42309ebd6e7b7594c088d14c35347f727bbf1827211fd7220d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_giraffe_tomato-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01257689e2b8afcd99c9da6b043e75bb374bb5555fe4693f988e6c82a29567f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_mole_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a023b13ca7d40a8605711d8c5d30f7a251e3b646151dc324109c5b16e61b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty_buzzard_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b940cde5e2441ec7a9602d30afed8475d586e99d23ae1ad7cba5391a13777458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blonde_buzzard_amber-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be52c576a880caf1df214ea105a939305bd823e5b3f9c5e111e45bd5aa1aa40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_hippopotamus_violet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813a4190f464b6fdd93ef549da98a052f14f953ef917efd869085fe8ba4db6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_beaver_gold-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b3a9fbb6ebbbf4b85234c9ece980fd4ba1a0cc6c72593ac2e9826c798b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_albatross_orange-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d268671cec5e80ea66cf5a1827f8ecb2eb829ecd76db8d634c71ff286e1f1e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112418 Malicious code in unchanged_takin_aquamarine-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f63e32b0dcdd828067761c5d2fdb017777782b5a9623eca9c2bfde487819f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...