MAL-2025-109716 Malicious code in tired_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb0e7e1d3957d9a23d1040c550af904fd2b17b681a5cd76d15ae86d372b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108618 Malicious code in sharp_warbler-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0bb2431c582b61a8dbd7a7a78d40fa7c2ea947fb4dc48802f2ad45429058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105776 Malicious code in melodic_hummingbird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d92ea4cedf0df1638947550f4ea07d803b042ee9734223fb9cdb719248172cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111132 Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectacular_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca4986e734285ad609758fb7e666067441675d01a0be0dbe2ba02c4a6df2167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_cicada-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd270ea11e83955bf025f797c807c93d0c1a1cb43d0cccb72667642590b6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_lobster-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c1bafa73faa8475bfcad96a2cee1729fced898e3248e75af69990aa9fb0235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ce33990b72d5eb35a1deb607a64ea6b9d6f96e644cb8ff186e5ce0b87dfde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2950411052fcf3973128ad2e6e6f61de112e65214ad0083a083eda26d8f8a09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_bison_cyan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc33a86662bcabadcab7c50e1ebf4ce0cc9f94147d4c92a331d3282a26d765e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106062 Malicious code in mutual_silverfish_scarlet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8603ff57675a38e27296a7d2e5e77aab7ac78d768a4635aa77cbd7f50ec59a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103958 Malicious code in imaginative_elk_maroon-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9753caebcf493d2601461ff4d592659d7d94e2985362d472cfe7d301a1293f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_jaguar_moccasin-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2149319b02766d0961c72c0628211fb13e1b0a265de210b5bddabd5d1d5d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b379601d1ca45aad3e2ecd2ba2c343366595282f06fb07b89713c8c107447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100103 Malicious code in bright_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5d2b249cb965aefbdf53ef92455c4ef6b202fe71ec67527accab03ec6c2da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...