MAL-2025-112273 Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112218 Malicious code in protective_seahorse_peach-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38819d4459fe22d14edb77679bb58715de3e6837fd4cd6771b2195e60de2f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b351023fd5e4e1f371a00978a97eb69c219c45a2c6d31ad5c1086c73c67b86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_xerinae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53bd0f2e84a82fa626a4ab1e5a91b8014c0dab918eecaa810998c5069ede47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening_flamingo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e9a48c95139ec099fbccae6509a6d6528e5def0765f509d23f5a3726a80519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_armadillo-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae3eb2332af1e6b398bad9dbfa821216ddd3b8b0b80e54a92766d157b6e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideal_lamprey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4eda82530b36e251beaa7ec696a4056efe6607cde873e6564b1297035395c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ljwyov-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe48b8ec7604784a4496f3a61795413375e7e04e1b01bbe2964c30c6307ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d863cfaebf6c845932763ba2d1d77df7db0a0b203cad1de277858409b1d57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in papsdaya-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b74bd7a1b23e9ed4e8051c29f3b0f5697bfc1ae1670eac89e4789fe42696cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_hamster-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e983d51c676a4a0f4dcbe5bbdaf56edb1990876ef2936c5ced1c43cb9c0b6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4779aab2da3e52a1da1cd71de1190b7ffeb6d51b2c43c679ad0cc0b6936064c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_cockroach-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1775819233e81b6b4442d8d0a594d1761750b638c302ff55a5a33439d9eaf4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_whale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23b12e2bf8dab6e838567057a513471f3ca7c37f553f3fd9eff84d8b403b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_squirrel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4033879e107d6fa31d0944fd39d07e95c8ea197d60200fc38d6e37a872661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103834 Malicious code in human_bird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9920d3eded7bfd256d191f92c7bc1078e37edba6e9e88433ac0dfb0f2ec19118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...