MAL-2025-111753 Malicious code in conservative_egret_silver-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7956b8b674dd6c74908e4c3f96af454b34a8a8af887091f7fc5337bc1d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112125 Malicious code in nervous_koala_peach-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7a2306522f18c1a15d054bb3f44ea78a725748b3a4b9fdae7bc61e33ff781f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112106 Malicious code in moaning_sheep_apricot-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affe2530801e4064117dfb717c6246f7573a64aac7751f2613dd642c387cea5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112392 Malicious code in testy_roundworm_tan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8d348927836b884137da548c6005e8acaf6d1ebec6c88f1195703fbd769a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_swordfish_gold-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9f1f9e843dda8cf1267324b29ada6688db5fcf5451d9dc6b67ad49218122b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_monkey_maroon-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9614bd5755d2f0e8c23fd4dd3887b01f620172d16ecfb895eb14266748f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_sawfish_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146925d01ceb9c7866c0d8583ba28de71917c40669bb29b6a65ef23c60d16d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_booby_plum-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f320c5116ec806f0bbc4e09babfb70df887a75f38e3205b0113316cfee15ceb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_ant_peach-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87681afc7349d38ccd0d132cc977c3740b158366c1cc4b465f1d468830ccc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_takin_aquamarine-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f63e32b0dcdd828067761c5d2fdb017777782b5a9623eca9c2bfde487819f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless_bass_pink-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f14a60ca9da66b52c180add195106c88c86a95522776319da15f36d67fc32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_walrus_lime-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c122efc7ac8aac6e14905808c3f1df67cd5d2d8081aa901339c4b5cbcb278bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...