MAL-2025-112329 Malicious code in sole_guppy_scarlet-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b6340f7135d49cbf460593d0554cf180e3f260e284b3172a0c37b927045aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111711 Malicious code in casual_ant_tomato-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04205853e464e6242f11f2900b53543b65aeaa4c72e00f84676684da6c30aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112401 Malicious code in top_gibbon_yellow-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301a47060fde5a72c39104ca3a725639e40e87b8613fde2d5efe8eba129d9e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_impala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a51254d0b51da255f2c96a15b26eee918b6571cc15c59fa0f3459495d914bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9a2cfe217a93889d90c1c5185b5647e57c9baac9ad036aa2232ed174c9bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109075 Malicious code in standard_possum-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6f8e732e2ddf0714236e9bb2e9115c60633c2259e0aa18540762eae4aab95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106873 Malicious code in overwhelming_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9175e0cf10f5ee62178cd6e1956173cd1c9a2e1ee08e0d3838a0e891180fd199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103790 Malicious code in horizontal_whale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adeda80a4911a42887015cd052e63dee21e747e338f0ddcfd8f344f0cd772d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102745 Malicious code in fit_earwig-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff584ab416b75895231370eb6f0ed4947a490dfd192731d7bf1b18844a8f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107729 Malicious code in rational_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3101186fe93eb0058c55e50ba8af0a951b0d282eccc20df904d2a840b7108c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111033 Malicious code in wowwgt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffbc235336eb834b7e210710b2e09f2a7873a74c39ea57f33cc16222ea77509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102659 Malicious code in federal_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb395b296a2298b678c80bdc0d1ca9ae94575d09de7e0fb1432c73eae3af22bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_ocelot_lavender-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44619ab182b16e7434fd13b44abbe52d1ac90a05bb65ce02390061e52580646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102880 Malicious code in fortunate_harrier_orange-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474890c260bd4bdc1c2a7e91f892ec68d2c478d655829d9bd46f69075232199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107637 Malicious code in quarrelsome_earwig_white-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8034e5f8bbdae060a640ee74c92dc2ed18dbd9aeebe61cbb76c43c96fb9136e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cd59dfadd65c619392066ba184b74bd3f8c574a2650e77f490f4a4dbb5601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a813485400ace25521fd04d01acc92f8017454178a605696c8ab81a2cfa65c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98afaa18881450c30c69bb9905b73d3f2871ae8a4829dcfdd3d55de948799ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...