MAL-2025-112483 Malicious code in yabbering_peafowl_pink-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8c1254301a47ac5cd6e1dbbac3ad3c561970240963831d3cacba6ce85bce06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_centipede-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c663ada18da455d2b28c6a548569d7d59fc16ae629f9d9887102653e3de75f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_bee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e75670d60db612c0f6d078a5ddc90ca89b684b3946d69e28b61ea9cdf70629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500183206783febe0742867519947df9407d047414d70f1adb79e5d18b802c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106748 Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107231 Malicious code in present_salmon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66d4d2423317b56ea224e295e29f5268064be5219ac4b720c984c2fc61ad032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105131 Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107907 Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...