MAL-2025-102442 Malicious code in extraordinary_shark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5b0bce6174edf07be05cb6c03e0200d469ac30d6d32c9b9ee0c15934e3ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102296 Malicious code in evolutionary_hookworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc587257f5a3e6508aef6b53d9dbfd5066ac11d8a193876ecb7cc0014a10a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_tick-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118eb3d875c62514090957d436712e68b70da85ef529c7600065a0533e5bdb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101046 Malicious code in crafab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_sloth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abbed89ecd3b20eb1115acc58bce0ec3353226f1d0d9f3f8acae7ebc93715f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btwrxd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b35697f22d7029058ab4422aeec9e5280e8e6a1eb8a7308fcea669d15b736e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101819 Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109605 Malicious code in thick_wildfowl-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5fa1d159373b8d1fb6b5447e4b2ea5d0ab0f6af1587f380e12f6b79ff6a0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_mastodon_ivory-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9053bdbbf7f1a712cfaf7a1843caca6d1f44876cfedb23d63fc8af960dbdf521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_hippopotamus_lime-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb9135ff48c44e848cfbd1c08f9ae73039a4bec900197ec385948aecea67751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_tiglon_plum-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce0142fcb35cdc7bdb33e4485e81ce44804508b66be0273f22e4c25a2d69c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_planarian_turquoise-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76fc7988aa39aa28d4133d7fa841aa777bf55fed12b94a4fa53fcd75a4668120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106388 Malicious code in nosy_snipe_tomato-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e538e6ff8bbacfeb7a54329dadb305b495cd5495901793c18fced967cfd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99099 Malicious code in active_snake_white-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae6c69d35e3b94661e044ccd5e7f241be1f645d1c13154e747c00ed0ebc7a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_raven_lime-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0a9bb392035fd263cd218c236e3bde5aee3b8bbe6b5c3514e4eacd7712c324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99055 Malicious code in abundant_tick_maroon-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfbde61c0f391614f890ec70eab96728dbc19f353b14b2413d353e8caefb551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_gerbil_pink-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ff98df135efa518d7ce3fef55c546d6dedce20bc79663fbac673148fe6cead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...