MAL-2025-112706 Malicious code in arif-nasi90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e55ad03dc4f0f97e5eb56c0ef34ae66da81c30b552f482406b72b8a04b0d789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in filthy_roadrunner_cyan-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f3af3760cd6b5ed0531c6d9f7acef3c2916d045e2a82cd7d6e905feec09cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_newt_black-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e699bd3f8ec9ee4a314ae8d330472bfeefd5ec88b2b741044de347a1d3b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112179 Malicious code in peaceful_warbler_indigo-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfbb1b593119028325fbdb9bf0db3dc776bc012044205e601c144d588d4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112322 Malicious code in smooth_chickadee_copper-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6baa30a95cebd775a08dba7e8bf2ecc5ef8c0fea4dd760e8af6179be967bdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_raven_emerald-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac338dd460ca6ec1897bba69c19e0bf17e5e76d8b2653b505bcacf5472b4ca80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112483 Malicious code in yabbering_peafowl_pink-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8c1254301a47ac5cd6e1dbbac3ad3c561970240963831d3cacba6ce85bce06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107907 Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105131 Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_scallop-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1690c74103c8e8ecc73348ee3523365d1ed3cc930d2dcd4d217351ea23e905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...