MAL-2025-112130 Malicious code in nice_armadillo_plum-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4230060d6b38ac4de5e5cfb75f09bf78cbe8c218edd81a1c54aa6050e701485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112310 Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112399 Malicious code in thundering_koi_olive-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc69d95414b0b1268523fa063a0b64702968cb01619c004e9f6c85b2473dcbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_loon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecdd1047477c51a2f16a6779cfc690fc602502f9b38e3e3d6f3640491842c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100055 Malicious code in boring_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a171de469e87f74fdca1673ea5303627ede8c18df5ffc4cf7527d0eb86c7e9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107399 Malicious code in provincial_tiglon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d85dcb101561f2103397b7df3fc82c2802af46af2a8782b2b0ad2ccd82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105078 Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101024 Malicious code in corresponding_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d2d48662178a018131a31cefc46b0e546e1271faa07ebcb8702cfbeb92bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104375 Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_grasshopper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88718f14e5ab2c2a45cd4f801d8d7b0ebb7c7b9795270329f4d661bafe31010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_finch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146da6a60df4ad45504a6fe6973c340935c49b009e576a58fd2c8304ba769b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104155 Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101819 Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107363 Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106392 Malicious code in notable_monkey_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993621d88ffc331fe24344866b7bd0ea4552437524080249db1d1dea63ecb33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...