MAL-2025-112478 Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112312 Malicious code in skilled_wildebeest_beige-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c12aed17022ea2d6c018d09d2384dee653fd469b07bb5dee606654b11f23f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_leopon_emerald-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82df52957fe7d083834fb58fbb684b4444bae4054bf2c831c676148468419892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111684 Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112460 Malicious code in wasteful_sparrow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff70a908a569cf7421f04e615098827279c8631d80bab9a60b56de5e6fc3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112164 Malicious code in outstanding_sawfish_salmon-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9186a218c1f6b86a6b6771e896c03920ed8f5ed1d9477119418ccbb4b2892cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111845 Malicious code in eldest_planarian_emerald-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e874c142388ded92204277d8dddf31924e0ee25902b780acc44955431a4c33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_snail-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c96c1c42bc750139f331b39752f1359900d4dd6290f862298d8f2455454f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aab026914d3ca197611db8483456ebb0b8e3857c677442db9fdefe17cc16bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_dinosaur-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d016d07b154b87a517f1b85a71bf5208890ecbd40fad1b62536ec120135fda7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_tortoise-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7afc830d97b4223672736285f872e1ea1027549471d17fd9bbb251b0d1fdddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_chameleon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364834c3ead2cf60154c96a1c6100e37e898623d86c99e2bdc1c376a422be2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_meadowlark-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd7579aa5bccbafa00d81e419c879e38da0804f52b5de4c08966e7f8e01147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tzgxrf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dbb4c7839dccf1f5b3c2140857e7a5b4736ac902080a486db7763c7cd9b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...