MAL-2025-111708 Malicious code in broad_tarsier_lime-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed17210ef864438c25bd29a49aa4c268df89acef2e4956c1d13e13095251a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_lemur_olive-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8347efdd7660572ff0cdc9b7f0702fb7bad488c9c64fb4d1ab7e5f873d6e8b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_cockroach_coffee-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd88cf315e12c9b1aebad6cfb1ae80eac7ef4788af07ae4d0219451f6706f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112099 Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112273 Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_cat_indigo-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8b1a993f75d83b8104bd198ea463e3e8e092f5157fd8f96a4c6c18acd29cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_finch_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02577825ab250fb3ec275d87b0c19a12bee2e6c7fbf7b2bef10481030e662332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112057 Malicious code in lesser_dormouse_maroon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8e630897ef315bd1fd02b39eddcd2d4ed09fdbece33be6093bb84c5543006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112218 Malicious code in protective_seahorse_peach-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38819d4459fe22d14edb77679bb58715de3e6837fd4cd6771b2195e60de2f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goulash-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb55bacf9651aaa272180515dfedc1cbf336d7adeeaab3308256728fdcae106d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ljwyov-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe48b8ec7604784a4496f3a61795413375e7e04e1b01bbe2964c30c6307ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b351023fd5e4e1f371a00978a97eb69c219c45a2c6d31ad5c1086c73c67b86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_cockroach-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1775819233e81b6b4442d8d0a594d1761750b638c302ff55a5a33439d9eaf4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_whale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23b12e2bf8dab6e838567057a513471f3ca7c37f553f3fd9eff84d8b403b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f7a4fc23a7bc74e79195da0340945c792a9908f0f0b9e6758e2611a34f79d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...