MAL-2025-112310 Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_swordtail_olive-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48a58edd0d9c0e45e2b084cbc31a632a92b42981e701f4dde74f1324d2c4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational_bat_maroon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738d7d53021056060e6a312ec3c7cf3faacee1e891ba10b2c59d94e49e747b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_hamster_jade-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b54f827ef0206047d8639c1aaea2b11b70060b18a5467c285b4832a9ca6c9e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111738 Malicious code in commercial_barracuda_peach-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889d537975feacdab947193e8ab585e7ba742d02a8313036dd6e669307414436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112404 Malicious code in tory_opossum_coral-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618009c31448dacfcd53e9cf18bb70782e993965cb01aecea2e0ea84babb18c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107399 Malicious code in provincial_tiglon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d85dcb101561f2103397b7df3fc82c2802af46af2a8782b2b0ad2ccd82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_finch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146da6a60df4ad45504a6fe6973c340935c49b009e576a58fd2c8304ba769b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_loon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecdd1047477c51a2f16a6779cfc690fc602502f9b38e3e3d6f3640491842c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_grasshopper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88718f14e5ab2c2a45cd4f801d8d7b0ebb7c7b9795270329f4d661bafe31010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104155 Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101819 Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105078 Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100055 Malicious code in boring_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a171de469e87f74fdca1673ea5303627ede8c18df5ffc4cf7527d0eb86c7e9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106392 Malicious code in notable_monkey_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993621d88ffc331fe24344866b7bd0ea4552437524080249db1d1dea63ecb33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107363 Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105863 Malicious code in ministerial_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384a63c3679545ec9be725acf14fd2bbc211cac368f96e53e1e4050d72099c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...