MAL-2025-112044 Malicious code in junior_hedgehog_tan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a7fb89cbff2a092c51eabc71262b2138e4557dc0d4432a5bb68d8aecfcb770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112243 Malicious code in regional_ermine_white-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503dd81eb73bf7ee86c1113e7040e199b18410b06730ccc4ae458e5289429e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112139 Malicious code in nutty_chicken_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c251ca57addc14e6a818941b9df2df607ccba089b727804f409f66763e6b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fanta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38e72210ae92a8850bbc1847b2b6ebd71d42cdad960b846422bbdc8988fcc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_tiglon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debdc4004bef0d538fbba138c8712575539445798be77031dea4b551283b3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db106d49bc56fafb251fc6990ef708d0878ea1ed46bfccfb1c90d7b08cc3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_ptarmigan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1f4efdfa573004cb3b49d99bee5ef6f82c413ff4677b7345de4f6e38bc1ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_rook-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf6c7627a1ec20e21d610d0de36a712b9c8ffbf995fe155689669a40e0ee27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_scorpion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd5150e68baf2190448387a714a50aa8ffbaa86ebd5590c183f26e90f2ec2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcaa95e36e04fc88cf9b332fc3f23c6a4132b7c4cd702eace503b06e7ccc1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_woodpecker-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945457998bab5e732b1a9ac081a3c6676b4ea45843eeec6de97ed6c7605255fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mjiqrr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be478c0af81568eb07027dd30a2599c6c23267e4c50e18776d8b8268c90547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f244f42b656074eea86a669f56c91fe57b941f61d5fc138c97ad1108e9f5f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_antlion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4d3e1db2774d7051c2b958c8b4110adc1db3c988f90326903c482bf7918cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pdjblw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fb33963862d289e4e3ad9a2073296baca8ade60882be01327bafa4aa1b054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...