MAL-2025-111949 Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_tiglon_rose-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8cf4a8e4727fad36826974319cba81a3327253268d79040dc6e6cf5ded4b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111657 Malicious code in amazing_squirrel_beige-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b9e5f426d96b6833f80c738103f071d317898282743dcdd5670cbead8237f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112231 Malicious code in racial_turtle_azure-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1f16bc7a7baf79284744d7e22af19925bc788679de13b8dfb14f83e5c77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112428 Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112462 Malicious code in weak_crane_indigo-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25861601d928d60a31e2ad8f96c5e8573645689cbffae57736666d5443b455bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b818c1d129ffb3575fe48bb0928c6d33fd6e0ea9269b51b04cca49173b4207fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_cow-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d76d43c2d5a3959c52710af82b46168a07361140fbd2e2ececf0682c738f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_crab-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b60825f385ed85ebf642353097f3d6651c563acefbc88891686f53fa3878305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling_canidae-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223918ef7ebcf3c11276abac5394d52c415901407cfe3b511d27b08c9fa1efbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_dove_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488308f8f14195fc54953a0395c7fb8e2ce99a825a34c1a6fabc130cc497f311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_orangutan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7212dcb17a3e4d14d8784f8afc870855e5c74fca6bc93e5381542d37b679131e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soup-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6bcd9c89fdc6a9e7e7662b6ba585b3316945602e0f85626272a31a82099885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6dd64699d0dbaa90c8c510155ff5c6213ae127a1cd046dead8f167774023e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560437c90c90c0053429de53def3588b25c02e5a242d2be705789cc6d756ee95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pomegranate-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9626bc401b942c8814ba3b920f1eb300ec76318d7ab845fbda660bd05be931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103122 Malicious code in giddol-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7f18ed80c8cbdf75006001c9aa1c871b49bd8db86af3d5f6bbfd0cfdb5b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...