MAL-2025-112114 Malicious code in mushy_mongoose_harlequin-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d515d7c1e6b0e36ad8ba1827a48371dad7ad5699aab0fd9fdaff6b5f2a93f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112484 Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111992 Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112072 Malicious code in lost_firefly_aqua-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d468c859237aa4f97ad9f6bfdb55f7c751abdea631f5d429fd56a6f4bba0f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111862 Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112116 Malicious code in mysterious_tuna_bronze-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d28924dbf0dff394b4b6a4968d373102d1254f9a148adfd22fe4b13387b6ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112409 Malicious code in tragic_haddock_amethyst-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fc7e54bb46b39250c17677b3a32a811d7d64db85f602f6fafb86a0c2c3d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112257 Malicious code in respective_wildcat_silver-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256ad5424549083847c3a06af1dad17121a78629c2048a2f61efae64b841bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112238 Malicious code in realistic_crocodile_gray-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c7b145756f311b40476d21984b89b191ebd77da82a79e73dec1c30cd40486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b325d88c4510ebaa649ad2731472a10bef178b2ccaef15a53ef27a0c9318ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_orca-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e56722fa11c0176bac063c6821db1025e6831a73224d0468b979d50e91123f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...