MAL-2025-112203 Malicious code in presidential_newt_beige-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b629ae67b7f95e41ec455677db62c6bb365ae62011885aa59ee6b0a4ac255db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112245 Malicious code in registered_bobcat_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f58df1a449bb543c399daf7ab0f0fe5873027823aefda909c8b26432f43323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112342 Malicious code in spectacular_wallaby_maroon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d558caad0829bb1a0cc2024579dd3a53c67a2a7a03797aba7e9893775f2725c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112394 Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111806 Malicious code in devoted_quail_turquoise-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a58a663d92c6369f1d3fc801cd854dba5eb636fb8fb719ebe38d96de8aad14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111748 Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111692 Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111989 Malicious code in hot_rodent_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeac85fdb10e1177e6402e85fec13f123141f62450f9d3ffba4d4e101243f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_coral-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69993c154a0c5f719ab7aca8cb692703d1a03cf288bcbac9ab3cb870fe080e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_mongoose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f1405eff71874dd19e72453de43f72d53b950acff822d5e410413d02f8cb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f204d82b53f3e63fcbd497b88c394ce32de0ce9a24ff3511140dd0526a3baee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_tern-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06650f71b5c474ee8723a732025cb0dd8c5c9a54b89105eed7b347ed1f86c7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_loon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5887c9c50de8df2fd880d6fe7e199519fbb117aa5ffa10776fe4c8171ccaaff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe96693ab379d9c6bfee4c72e529a607e0b290daa2804c3be6ad44b837e3dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wzkbyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3edfe1862b623962e1753b2a82dd75182c5fe7fab54ce47bc79ae367ae7285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affc4b1fd995e21cbc3726793af8b90f1ea83db51b0c9b939f78d8f2ed831672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...