MAL-2025-111690 Malicious code in basic_catshark_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61f7fdfc18878a9f3266831e472cebf2e274b6d77527c33a5a95efaeb487bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112021 Malicious code in innovative_constrictor_scarlet-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9198aae837d63a3e2a6cd8413f649aaaadaed357bc9e6af7bd7c37c61abc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111996 Malicious code in icy_chimpanzee_maroon-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f5171036f06448ab8ba9305199f07ed012f5a7037a6b3df03ca975aa793251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112329 Malicious code in sole_guppy_scarlet-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b6340f7135d49cbf460593d0554cf180e3f260e284b3172a0c37b927045aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111903 Malicious code in financial_halibut_lavender-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85aef40b3af5c819396cf237af6a7f16701e477a8b70bb2a10c215dcc60f6668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideal_hare-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7b9a9b2382be8efe9b475d58a8d5ca2b8167953dce30a49dc84d7d32b50eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_canid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ee41f6fbeed9704e94d3c2bbe7d160b584231b733e2e49a17ab0547d971a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_parrotfish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dde6f33b52a73b4020f6f64d9154256b774219ef7897f9b165d22f0270a341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_swordtail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d9517607696f8107a2e5ab8f664f7a0aeda60aa4e7466d5596d92c5cbf72c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35455815807c8de3c630dcd3d1e492f1e50b0e66427e4f740a76bfaac46b2cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_sole-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5057ef55fa5b0941ed29a7110d90645dfe4b77fa466e10c8fbeebb60c56afae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106383 Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_anglerfish-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c35b70489b2d39d79c0890380284650ef07012db894f70b408bf8e5f9a73f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_primate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1be10705b41c68d6b49d85ca9b9ce677b4e7dd0338964bf76505573d3aef91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...