MAL-2025-112096 Malicious code in minor_cicada_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac597d4cbef2eb1f28302822c88d3f49201d0bb52d7e62f5e1dcb674529e6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111954 Malicious code in gradual_pheasant_chocolate-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acb312d7eb93fedadf666dd74dca09a87c74d7ee6661da309a2f6d227ab343a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111918 Malicious code in foreign_coral_gold-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac292a115d9068edd190e8de041e5beca9c7ffab77c2e42752345a85b8b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_python_chocolate-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee78c995339138ef16f17c91857cf04ae02c7538a9215e8aab2b74a069b2631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_goldfish_maroon-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc02e06c9b109b60fb34ff58b4ead0b15a545e7deac4ed15e6b128643e9833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111920 Malicious code in frantic_parakeet_brown-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98565198e11e726621b7610dd4b2508f7cbe4a3d2408f8257d9f8b594a2fcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca48ecc5002c0c73d60315333740115559895ebbe12aa7ec7ffda56967f58f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_toucan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc92420dd7ca64e458044aaa0144643786019b9037ab12f6a5fe6f5b462d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tlucsc-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fd287863da8dbe3bb88f2e05b243c28674ac94aa11c649d405cdc66d9b57ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_parrot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e85a6d917dee1dec495cd653bb87feb78c6f3284aff61580273ebec198221a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101238 Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ncsfhel-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2d2d7b461cd71b4120ccdc8b17d83488cc25782a9684bd9ff46a3cb8e4fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_raccoon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7c802fb7de5e6ed0bf4886759f2d01f53bd8c4842aac5dfd825ec088f842a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_orangutan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57592d92768005f7feca40ea27e7d709411e7de445e88fff1d16c1d267f04764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dumpling-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129724a03b50588d7bd32087db5a992d8b687f866a0765ba31e28f5929308e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99645 Malicious code in associated_seahorse-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b66de8aee9c3a47cd37f9f7693d15c107731f052f6f74dbafe33c8001b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103741 Malicious code in hollow_dinosaur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a7ef8b88ccf1ad7efe32f7bb8520f604fb0eae09220aef1dd870478c0e6593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107238 Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...