MAL-2025-112312 Malicious code in skilled_wildebeest_beige-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c12aed17022ea2d6c018d09d2384dee653fd469b07bb5dee606654b11f23f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111845 Malicious code in eldest_planarian_emerald-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e874c142388ded92204277d8dddf31924e0ee25902b780acc44955431a4c33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112460 Malicious code in wasteful_sparrow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff70a908a569cf7421f04e615098827279c8631d80bab9a60b56de5e6fc3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112478 Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_ocelot_cyan-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e105fef9fecb7adfe032ce9d11fa9057f49be23f6ebc470e290bf3e05302421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112327 Malicious code in soft_goat_beige-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064f87e3785816732f82090ba27f50c1aa0dd8859a6669d7c4255dcb01463c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112078 Malicious code in managerial_raven_amber-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e737bd3ac7ab60b6633002525ffc91ce2a458a9d2f221a78a327ba103b2ee3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111863 Malicious code in estimated_jay_amethyst-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3300fe1b1338e3b60f81869c095124a70f4184fa843caef8b5b3f8f7eeb905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b325d88c4510ebaa649ad2731472a10bef178b2ccaef15a53ef27a0c9318ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pear-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a70fc28f45b7322847a42b099d5273d81d9dcbc01b51746675ef976ecc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_barnacle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608d8a963ace46225032f6bc93aa2099a9a7511110e77c73b39705036ae6c090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_rook-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b29ba3fd6782dbca537d63045ffa46148bd126a1440683f7fbe7c9f7990c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_meadowlark-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd7579aa5bccbafa00d81e419c879e38da0804f52b5de4c08966e7f8e01147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eaedcf5b31c227aa8a15fc604cb0cca27c53c0c6a424fbba748da0210b5b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lqnzwf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5f48bf81693ef6960d7953f2d67b141d997a92a4bfb74e02db9a96439d481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...