MAL-2025-112378 Malicious code in swift_rhinoceros_salmon-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eefe3dccde15409586427b6a70d4c0315715e3058e1a20b6062f830e9037c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112346 Malicious code in sporting_ant_cyan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbb35baff8d2e2940994ac5bd8fd9e73863d7c69e2155bdae0f3b96963149f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112472 Malicious code in willowy_mammal_salmon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7ff4bcfab07bdf835ebb6689cf54dcc0a7d9f591ac66d181d683750dc7a21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111935 Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_owl_scarlet-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53319e749a2faf0435de29774e3051b2d8d7d78e41e504f2b8943380eef85944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111871 Malicious code in evolutionary_mole_orange-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de820c84c741208c063d8f282152b1d2ba0288bb8bd0749bbd4dde28cf6bb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20198f3e645445bd6530f01b0464c6684a020d39e9e7c22c153deccbeb3e22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_galliform-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e3da6be79a610595870fdc55f6b9016b09eef7775cd489223befa071c709b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeasatra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a7859eadc61dbbc0a46373d28b0a6992d0c2a3cc8bdde7d89d6ea1ea45d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5494784f50da19c7e16f72222ec6439c0cbe437e19e781c5afd428920d44da43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evana-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1fd4368fc4c78eded8f350ef2daadbfd31ec3b0a97a2eed4ce05ba19098ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iuqkus-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1623b9ee5255209feeeca56153076f86e89988d5ec2bf77f411bc672e7b569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_dormouse-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332c0f7b1a916181ab9db4b9af01771cf4ff082521264289bc8e4bc1b5f5f537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_amphibian-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d3d94b5a0c4f9f8e31114ca93a8ae992ffb3df69a2ac8ecd1c60845bab1eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_cobra-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e0028d610d714b33d73cb28c9d9818b39e7ab2df638d9a8ee7ce61e62df5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tsnzau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598ea3d8a0fc322c381ac7c91bf408d40e652ae4d8ba7470e752635d883dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_krill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a30d54104aa024b63c26c98c8276a005220afd809994fa25ea39d40441a4088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_mule-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d696f04167daf7d634f6f7e0b1e59f57937b64b28d794bded8ffe84da33cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...