MAL-2025-112307 Malicious code in silly_bedbug_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee5379b784f2e5c2041e8ce5d16e137fb6c21b74981746d9d75c31dc750d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112476 Malicious code in worldwide_sloth_orange-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb00598100403a6a021a88a880d661ff4c6d88c2251feedbf16e6b6804eb8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112499 Malicious code in zoophagous_rhinoceros_silver-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d594c564e03d9485753e700809620612a45fcf941cca94cf9cf0b1c9cfeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_blackbird_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07187e0562aa868a5b145b1925efde1a3de1156ed1f48ab40c014eb819aaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_hedgehog_pink-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8baae7b99665ba4b4fc152fcdaec74dc2400b08949bf32a4c6b1c1ca3b66b42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112269 Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111948 Malicious code in glorious_frog_green-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96508623f39035fdbb4626dd3484f4158a2daf41a705a9b55a7c5499fc165b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111667 Malicious code in architectural_shrew_red-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9089ef7d25604d035d061a42ec826101f01030719ba2e40cff1c5a4dce90eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111921 Malicious code in free_coral_fuchsia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb09c5114ba6c6bc04ea183f26c7bd0821a5369bee8ee0b27f92f4791b29f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required_thrush-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5dadb02713303d2798fc65185ac6d1e2bb24ad4d1658bcb69917892985b97fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_cheetah-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b974255b83050c01f1fa3c574158293d5632607bb5f03cbce727786eba27117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_bee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e75670d60db612c0f6d078a5ddc90ca89b684b3946d69e28b61ea9cdf70629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_gamefowl-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8688549b03ce7fbb5f09ed922ea71740cbee3f80653cffc4b03d99aa0e4dc064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_lion-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baaa854c638830b50ab3301da6f8300f895d3e2a9326b5fcbeadb1c0175961f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_bass-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ed473d5b18396a41ac8645c3d607e5b4a541c0930a1dbe1f9b6ba66f3f4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...