MAL-2025-112099 Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_finch_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02577825ab250fb3ec275d87b0c19a12bee2e6c7fbf7b2bef10481030e662332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112057 Malicious code in lesser_dormouse_maroon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8e630897ef315bd1fd02b39eddcd2d4ed09fdbece33be6093bb84c5543006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_cat_indigo-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8b1a993f75d83b8104bd198ea463e3e8e092f5157fd8f96a4c6c18acd29cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112218 Malicious code in protective_seahorse_peach-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38819d4459fe22d14edb77679bb58715de3e6837fd4cd6771b2195e60de2f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fa60adc51be9cd0e818a27e0e00e26ed99341d65a225f8aa010eeab5efeeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ljwyov-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe48b8ec7604784a4496f3a61795413375e7e04e1b01bbe2964c30c6307ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_cockroach-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1775819233e81b6b4442d8d0a594d1761750b638c302ff55a5a33439d9eaf4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_basilisk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe8bfa73e86506c0129401aa380f5438c06ad2d098f170cebd4b73f196fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f7a4fc23a7bc74e79195da0340945c792a9908f0f0b9e6758e2611a34f79d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_whale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23b12e2bf8dab6e838567057a513471f3ca7c37f553f3fd9eff84d8b403b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_guanaco-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3822199c75451f80f4a1485cf578527920426d9665af176c21b88d7b019cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goulash-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb55bacf9651aaa272180515dfedc1cbf336d7adeeaab3308256728fdcae106d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b351023fd5e4e1f371a00978a97eb69c219c45a2c6d31ad5c1086c73c67b86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103834 Malicious code in human_bird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9920d3eded7bfd256d191f92c7bc1078e37edba6e9e88433ac0dfb0f2ec19118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111534 Malicious code in zeroth_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36ffef3b59648ec6a697baeb2630fc67334f8b50258bb6c239e5841a2f8c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107064 Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...