MAL-2025-111995 Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111990 Malicious code in huge_piranha_white-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9956c57c0a5da66e403032e9d865038392e741ef7f23b5509230fead69cd306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112215 Malicious code in proposed_tuna_scarlet-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea62ac886b22065fff0951c12f826353cca89d2faa330ae6b898cfad0237f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112009 Malicious code in improved_trout_turquoise-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592a7121839c91a75cde8d17fda76d8cf2ea965afd6fcbe42894c35bc286419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111705 Malicious code in bright_barracuda_olive-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5484561f4a76ae53be30d7ad52e982d4ca44243ac10535a50d36ea0ed8400977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111743 Malicious code in comparative_koala_gray-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39211ebe47510c492b782b320da6dc12ed878ab81ee702328088f564a9812e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112419 Malicious code in unchanged_tiglon_emerald-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c580c49249e2af6f3b24ecfe3bd0a32cf75b78b373417b418bf8c4ed6ef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112230 Malicious code in racial_flamingo_amber-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07934d707b12f8ab539dae3fa35b7eccbc4cea3302b51be66f7c20278691c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_alligator-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a2ef94cbba2f4172716c09df6e09f954fcc8b0b870284b4cf3a6a261e07b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dbvahy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d0505f863ab64fd74066cca585aee329aa91f182e9ae382b378767607fb2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chilly_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58766cc19e043b0c7296e7527c1711ecc1c3ff4fca5eb4028f7e1eddf46381c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rdlgri-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aba5e00473c09cccf231680ad34e699844d2bc8a2b20f560606ff9f65ddf64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_salmon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cda9a098144801e5888f41ce0ff37937766b78870d39f2e20ef4b4443e3cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729dbac887325a67e5530bec1db64101e12662b2aa46fb5bc17129b1c4adc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pefsas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc8e2dbd88bda7b5243c4f104741705ea8895581f5098e8f646318c781c9272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_mouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93661f6ab4a1d3f7ae647580f55c70dfd3edfb722a7fcdc042f5649174b492b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ba786dcf090ce3643cb49cc06eafe04d049f0e15a7584bcaba5e610433cd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...