MAL-2025-111781 Malicious code in daily_worm_magenta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d10d956b2a03a8d770007e1e5505f24b76365470cbfae853a74c592cf9377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_bird_azure-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19699eef85adcd144b005cd40682140e84828923c2fcd975edc1896ade25ee45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_sheep_pink-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489ba6b5e6a4eb2efc4c57a5579a6d13afc35ab9c5ff13f633e2d42ffaf77267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111996 Malicious code in icy_chimpanzee_maroon-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f5171036f06448ab8ba9305199f07ed012f5a7037a6b3df03ca975aa793251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_rodent_orange-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac903575cbd4c11e48bf4bd4900cec98742ff7776f6722f47bec5cadd59426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111690 Malicious code in basic_catshark_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61f7fdfc18878a9f3266831e472cebf2e274b6d77527c33a5a95efaeb487bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_dove-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e260738f2f6d7c191ae985fbea30d313f8cb45330f0bc521ec475c9623cbb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_primate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1be10705b41c68d6b49d85ca9b9ce677b4e7dd0338964bf76505573d3aef91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_bandicoot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d462c08227eefe36cbabeb524f653ced7331e58cb58c760a133da352b7d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_canid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ee41f6fbeed9704e94d3c2bbe7d160b584231b733e2e49a17ab0547d971a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110764 Malicious code in weak_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb7e2c7bf43fbe86831ca1e5e5fe1f52bdd5059ad9dad04d562a544f08d97aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111560 Malicious code in zkfpwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbe85c5658ba8c5aecc662cbc2a186c7ceb6577c561461d9a55dc2be9d3ed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100834 Malicious code in confident_toucan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc92420dd7ca64e458044aaa0144643786019b9037ab12f6a5fe6f5b462d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_sole-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5057ef55fa5b0941ed29a7110d90645dfe4b77fa466e10c8fbeebb60c56afae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_anglerfish-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c35b70489b2d39d79c0890380284650ef07012db894f70b408bf8e5f9a73f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_salmon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66d4d2423317b56ea224e295e29f5268064be5219ac4b720c984c2fc61ad032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...