MAL-2025-111845 Malicious code in eldest_planarian_emerald-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e874c142388ded92204277d8dddf31924e0ee25902b780acc44955431a4c33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112078 Malicious code in managerial_raven_amber-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e737bd3ac7ab60b6633002525ffc91ce2a458a9d2f221a78a327ba103b2ee3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112460 Malicious code in wasteful_sparrow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff70a908a569cf7421f04e615098827279c8631d80bab9a60b56de5e6fc3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112327 Malicious code in soft_goat_beige-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064f87e3785816732f82090ba27f50c1aa0dd8859a6669d7c4255dcb01463c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112164 Malicious code in outstanding_sawfish_salmon-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9186a218c1f6b86a6b6771e896c03920ed8f5ed1d9477119418ccbb4b2892cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112417 Malicious code in unchanged_puma_red-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7503a0e21c74c4637be1e61c1683b9795239d8b7b0c316c4d4b6e4959b247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111684 Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eaedcf5b31c227aa8a15fc604cb0cca27c53c0c6a424fbba748da0210b5b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_snail-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c96c1c42bc750139f331b39752f1359900d4dd6290f862298d8f2455454f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_barnacle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608d8a963ace46225032f6bc93aa2099a9a7511110e77c73b39705036ae6c090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_rook-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b29ba3fd6782dbca537d63045ffa46148bd126a1440683f7fbe7c9f7990c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_giraffe-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb208816c694b0f8fcc5d06a83eb98d967f6580e9382609a440955432cac0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tzgxrf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dbb4c7839dccf1f5b3c2140857e7a5b4736ac902080a486db7763c7cd9b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lqnzwf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5f48bf81693ef6960d7953f2d67b141d997a92a4bfb74e02db9a96439d481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pear-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a70fc28f45b7322847a42b099d5273d81d9dcbc01b51746675ef976ecc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...