MAL-2025-112139 Malicious code in nutty_chicken_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c251ca57addc14e6a818941b9df2df607ccba089b727804f409f66763e6b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111851 Malicious code in eligible_dragon_scarlet-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cc86f052865a20cae867088bb1b0d06eda1a90572a663223a264b7db735790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111817 Malicious code in distant_otter_coral-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2295eda69cd0899c97a7edc71bc87579fe1c90b57c24d15914651bd62b38a7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15979efb694fd752e7e4fc39e8a3e34cf784443ee0515d8d8c678a9057e2de12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_hedgehog-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e25d5250f70b5778474bb68fd2fa93ddda3b88eb0c2e1d28d530d1a8360b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66345e7f35162cb5e3442aa40a94dad5535e6a1012ad4f40d01bc4e8decf409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6a5633a2c1d323838ceb1e9f7a2363631463c1eef040fdfa0e19aef094478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_tiglon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debdc4004bef0d538fbba138c8712575539445798be77031dea4b551283b3fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_sole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0914ea8ce3d933b6e76a54965a9ff608719ac33d2a6b431f326c8f9c36ece4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4073a06b814096374ce5f694dea3be10cc46905192124e04fc00da8f0a0550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4137d27a492127c60b130fb674bf307e99f8ca994bb49bf5521b422a5e33cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fritter-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a6f6b72ffdfe433bb4eabafa7269d82f26ee6876884216c0a8b4639d7d669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9a2cfe217a93889d90c1c5185b5647e57c9baac9ad036aa2232ed174c9bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_elk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a3befefa5928b554aab5d455759102de0bc7bfd05e7b1b5e3b01d1223fca59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_cardinal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f82e73cbe4d6ed4d70fcf00ff387492572e8f91970c18dbb5d60dd41f737f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_ptarmigan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1f4efdfa573004cb3b49d99bee5ef6f82c413ff4677b7345de4f6e38bc1ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...