MAL-2025-112455 Malicious code in vivid_sloth_orange-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ed3ced4da7435380dc2282cb77aca4d5ed7f43563edef27ea4d0874377586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112394 Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_centipede-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c663ada18da455d2b28c6a548569d7d59fc16ae629f9d9887102653e3de75f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_bee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e75670d60db612c0f6d078a5ddc90ca89b684b3946d69e28b61ea9cdf70629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500183206783febe0742867519947df9407d047414d70f1adb79e5d18b802c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102245 Malicious code in established_baboon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553d9aa7e9d62bdcda31165100be9e64850a1e0693a4cb782c6f0e29b8a594c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature_possum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd97bb7e25315553080121e7adfbf66cf03a7a651345703f269afdb9cd8a7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_vicuna-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b060992dbd4caa9f855cd103274521b6588334e6a0432175dc53aa7885422cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_unicorn_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d249e9de57c41ceb70dbe5e716f105543bfbb25aea024248261533cc67cb06e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106748 Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107231 Malicious code in present_salmon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66d4d2423317b56ea224e295e29f5268064be5219ac4b720c984c2fc61ad032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...