MAL-2025-111788 Malicious code in deaf_swordfish_amaranth-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bc4062a74c1f4ad0754330964fd8fe45eab881de0eec6a4aa912883301519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112038 Malicious code in irrelevant_cheetah_violet-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dbb3b0e6d4178b84e656ed7feef54701f5a1998befa86fa6d1505bf3fc1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_swordtail_green-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d7c157699bd59b73f51e319dd87b4f6cec12d26bb554e9e2d37f474e0375db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112251 Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112437 Malicious code in uptight_crawdad_bronze-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d7136cfbb227f5c821da61581c1766fc9a72b3487004539bf1bd14da44621f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_trout_beige-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c02f9a282ac6d11791985abb05942198f2a3ce32c3e784d877a588637af2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111979 Malicious code in hissing_pigeon_fuchsia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96271f3dc2683a0e062c9a0707d5c7ebb499a0456fbd073a9bdf1d71a6127856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112384 Malicious code in tasteless_possum_silver-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0821389ab1b0a49ca07288e2d54e38ebb5fbf54d3e4b1de8690bda769f8d34c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111853 Malicious code in emotional_meerkat_salmon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33617a617b90fbd569567a5c16aaf0963b39e8ed23b5621c30dff578420d0e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112408 Malicious code in tough_parrotfish_blush-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87f9722822c9baa36fd295bd8b567989b8461ff417d7659dde41aee9f5e513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_sparrow_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b599412a0df4cbaab8dd4a2aeb0b7e37f0333f5aa6a329f960c5726d93fc42bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_salmon_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736aa46a762ab71748f8c4933ab008e609b630d53ee9873afd893a57b27fd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_lark-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7f3f9e76da84927154360afb41f50f932da012db576b8ef3e51bae3307c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_dove-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e260738f2f6d7c191ae985fbea30d313f8cb45330f0bc521ec475c9623cbb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bekicot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c985c2bbf85e98688728b3f962a061709cf7e4f9e718019ff231d1528ce3f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...