MAL-2025-112258 Malicious code in retail_turkey_violet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a51049e97c00f14f199b28ab3321498f0738b4cf11a6a8f88055381b0d93a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111871 Malicious code in evolutionary_mole_orange-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de820c84c741208c063d8f282152b1d2ba0288bb8bd0749bbd4dde28cf6bb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_turkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341df1349e97f3b43b74ce5833004f0aeea43aa21152ea5df512022f642001d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_grouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e509ef9bd9de28b8f907888b96298f84adc9a7609aa574c27ce053dce9dd4eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_crow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f7d4287b723cc5d67bb9d13d0367f4f005cdcb96a79ff9633b0300103e507c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_starfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bc98e9741ecb54972ef5ce1dff009aa4dad1bc0b60acf56b07d48116b2924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11909598f0f1a8a028d8ddb1d37abcf4301d81f665d4d4ea6eef8ba4526f777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e775a6c1de0839c5724c412d988d025a78c96ef577bd9651909b5021c51a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971a125183a4e33829056ada920b0e2218adcccbfbe05105ca50d7fcf2f41a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14fcd86cd21a6a6bf1653e0484d25be6c925ca8a7c580a44098212bd807479f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped_scorpion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2afe34548894ac9fd91c270e0b7488e05d2d59c8a60c44bd5c01d8a8e49e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107259 Malicious code in primary_duck-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2de66fa47d8bf82f74587e863eb41c84d995a16ff4c6e5649f657cd81d80a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100773 Malicious code in complex_monkey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bec9c429090d6c859c96d091477ff4bfbdd25ffbf965b207b7f2bdd4800d0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100013 Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109908 Malicious code in uathal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52b70d19ca5e35a5401145edfd43e4533d8a76962a54e6429672ce81edd06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104310 Malicious code in intense_stoat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e7546fc5853280b65ddcdd8ef6a2b9fa226d43f5139c4a2a1466d1f44d87e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...