MAL-2025-112342 Malicious code in spectacular_wallaby_maroon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d558caad0829bb1a0cc2024579dd3a53c67a2a7a03797aba7e9893775f2725c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111924 Malicious code in frightened_landfowl_black-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66151be2ae0d56b3952e36eeafc65ef19771c5b6ea91e6bfd3959031de0b7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111826 Malicious code in dominant_tarantula_ivory-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d8bd512354654e0cfdda6119675e2758ae7f2ddbe2cd473861d54c09fed980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_meadowlark-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e91abe543dbec0036b1d62fecb494ce9933c7bde658aac563c28b7be6151e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_antelope-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b426fce750c536ee69bdee946aaa4614d18a99444da05771bac270faea67846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4614acad7f901fc894828c6a0222c709214a5e71d596a496b693747b5e17de55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18d2b4f46964c8f2bcd2dd4b4d30a4b398716d75b396dd0c6a26a6abb21374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_kiwi-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9670c133109df77cd940a0270abcf16e706cd7e4897c37a929047fe0bf0e255e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_mink-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff7df3d5c1e7fce3cf87346ed8ebd14abf345dd998e2750cc7085a6dd97c6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f9c3e797d99844b6df0f8a1eee404c74c801c6532b09f556c8356a46151b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qnnkan-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fba9cd6e1f1fb39237b9e93728fd33c0a5c50f3ba8843bb7f8635ffa02f00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zxozza-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ad14fab8347c3100ffada516ac970e3ff45c6234d5aa16215ee713934ffb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_starfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb217c941d8b5661c99a35e1513f89440dd82c72ba61881fd47efbfc97bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863af8eaae2d469ad7387481013fcd62ad91db92ae19ff5e9bfd08c2e695c0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...