MAL-2025-111845 Malicious code in eldest_planarian_emerald-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e874c142388ded92204277d8dddf31924e0ee25902b780acc44955431a4c33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112078 Malicious code in managerial_raven_amber-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e737bd3ac7ab60b6633002525ffc91ce2a458a9d2f221a78a327ba103b2ee3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112164 Malicious code in outstanding_sawfish_salmon-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9186a218c1f6b86a6b6771e896c03920ed8f5ed1d9477119418ccbb4b2892cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112460 Malicious code in wasteful_sparrow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff70a908a569cf7421f04e615098827279c8631d80bab9a60b56de5e6fc3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112478 Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111863 Malicious code in estimated_jay_amethyst-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3300fe1b1338e3b60f81869c095124a70f4184fa843caef8b5b3f8f7eeb905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112417 Malicious code in unchanged_puma_red-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7503a0e21c74c4637be1e61c1683b9795239d8b7b0c316c4d4b6e4959b247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111684 Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eaedcf5b31c227aa8a15fc604cb0cca27c53c0c6a424fbba748da0210b5b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_rook-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b29ba3fd6782dbca537d63045ffa46148bd126a1440683f7fbe7c9f7990c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cfhdod-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050fedfb48e79bfad549b804ae7705b6d4911ef38fc68708f6492693a9573852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_barnacle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608d8a963ace46225032f6bc93aa2099a9a7511110e77c73b39705036ae6c090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_snail-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c96c1c42bc750139f331b39752f1359900d4dd6290f862298d8f2455454f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b325d88c4510ebaa649ad2731472a10bef178b2ccaef15a53ef27a0c9318ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_giraffe-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb208816c694b0f8fcc5d06a83eb98d967f6580e9382609a440955432cac0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aab026914d3ca197611db8483456ebb0b8e3857c677442db9fdefe17cc16bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...