MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111895 Malicious code in female_albatross_gold-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2c02b741d085abca30b5f07b25e1a902dfe3bcffbdf4e751928be1eeba68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111797 Malicious code in democratic_elk_black-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad354eaa5fdd883eeb68d78a1ede94be26d60315328fa227ae75225a22061a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110188 Malicious code in unusual_snipe-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b02a1bef6911c7ea11a45376696b3d013340d6d65a05f4ac3fb3cb0b62b119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103818 Malicious code in hoxljg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d421c6b6a247d3e65b77f0618967f50d9cd3cdbf2826803f86be825d2d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huethea-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2cb3fede06ad21fa6f889823e8628134c66e3c151e8939679331f76c0ab972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d4862c7c97af3b634f40425149ca48554cbcd5612ecbc7343cc2458c4d898e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_sailfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ddec2f5bdc8f55aa783e94473ab222848ef738048beb75c31880b257bd5a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_swift-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0e06ad23cc1ad9739bd94eb14ab82338a9217baa5aa03ff942e57054932fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pcxreu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663ffca70461376d4d89855a0159b8819978321fa67a3304ef4547d6da2e49f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emetrius-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f85205e3bccc0e6f8908a9333ed20863d22f13f683261c1136def34f42db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102101 Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...