MAL-2025-112079 Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112179 Malicious code in peaceful_warbler_indigo-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfbb1b593119028325fbdb9bf0db3dc776bc012044205e601c144d588d4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112112 Malicious code in molecular_turkey_black-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3cbd9ccfa20d11600b940c652b851e7a5c4a0dd3901fb6dc7447809b738938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_penguin_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9aba93c04bbfc3aad78c1b88c42ade9023e187267c69b9e8e0e117ce9b26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_wildcat_amaranth-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8efb556983b6652fed37a875e00e837d62b07a3b400af4a0b58d48a60a52f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_asp_coral-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d362b29c3a239e95f87dc0167aa15c70c94f4bc88dd2b30da299744a8e81f09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_raven_emerald-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac338dd460ca6ec1897bba69c19e0bf17e5e76d8b2653b505bcacf5472b4ca80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112397 Malicious code in thoughtless_flamingo_amethyst-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcc404a86eb59bd5fd235ecc50284cafdccf103cb4c9e78a9157d09a348674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112483 Malicious code in yabbering_peafowl_pink-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8c1254301a47ac5cd6e1dbbac3ad3c561970240963831d3cacba6ce85bce06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1286dd1a29fdf2886f7d658a5787d4a40da5250745539f7fd9b4a19e52528cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_macaw-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919258ad4187f64ab58ee67bcc31bbbb63928e20a407e34e5ad1cf4e43f0cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088b5511607ad62edcd65aba76c05b48265b76223b5c87cdaac144d5f063e096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...