MAL-2025-112288 Malicious code in separate_leech_indigo-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d019b3e20ff49c0da1111a6f950d0e2d9fcd93ce655e53d69dd119e54aec68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112013 Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111862 Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112457 Malicious code in vulnerable_bandicoot_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a10f8f1b656f1828846b943c9e1b227ac381c4334e10cfa5d01885818bac1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_carp_lime-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da42f5af0e0285226f83645cfc2b76d96417c409f52fffdcee2001dd3c44f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112275 Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112257 Malicious code in respective_wildcat_silver-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256ad5424549083847c3a06af1dad17121a78629c2048a2f61efae64b841bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1539319803a82910c102a343eb7a40e5067c5e17fd4c7f5d86a43fa00742a686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1633e53e54ef232bcb09c1b2a595f6865162cdaa19aec3cbd4879887c75379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...