MAL-2025-111845 Malicious code in eldest_planarian_emerald-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e874c142388ded92204277d8dddf31924e0ee25902b780acc44955431a4c33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112312 Malicious code in skilled_wildebeest_beige-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c12aed17022ea2d6c018d09d2384dee653fd469b07bb5dee606654b11f23f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112078 Malicious code in managerial_raven_amber-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e737bd3ac7ab60b6633002525ffc91ce2a458a9d2f221a78a327ba103b2ee3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112327 Malicious code in soft_goat_beige-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064f87e3785816732f82090ba27f50c1aa0dd8859a6669d7c4255dcb01463c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112417 Malicious code in unchanged_puma_red-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7503a0e21c74c4637be1e61c1683b9795239d8b7b0c316c4d4b6e4959b247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112164 Malicious code in outstanding_sawfish_salmon-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9186a218c1f6b86a6b6771e896c03920ed8f5ed1d9477119418ccbb4b2892cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convincing_skink_apricot-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7904aa0d4c12b3510e268cd4e0c0a60c619819becb2135db4255771766628721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_booby-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1440f2607031a1cd0f574cf9bf1c047c68fbcd093677d6dd327f7307ca65d2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_meadowlark-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd7579aa5bccbafa00d81e419c879e38da0804f52b5de4c08966e7f8e01147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tzgxrf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dbb4c7839dccf1f5b3c2140857e7a5b4736ac902080a486db7763c7cd9b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99704 Malicious code in aware_minnow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101067 Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eaedcf5b31c227aa8a15fc604cb0cca27c53c0c6a424fbba748da0210b5b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_rook-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b29ba3fd6782dbca537d63045ffa46148bd126a1440683f7fbe7c9f7990c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cfhdod-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050fedfb48e79bfad549b804ae7705b6d4911ef38fc68708f6492693a9573852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_barnacle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608d8a963ace46225032f6bc93aa2099a9a7511110e77c73b39705036ae6c090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...