MAL-2025-112297 Malicious code in sharp_armadillo_gray-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfe306c9823d92883a1367c4cb2f5877c89577ecaf8d009d2e56cf7209ab795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_mite_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1367cb82207fe9d648580a07a8d80b163d73ba40aed05e508e79d577d7d4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_ermine-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c61d1f89cc541226b2df46782eff8de628d9febf8c05ebc997e1a80c82afca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109603 Malicious code in thick_parrotfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da1add87421be7f0fb2ae36c69f7ab769962aef939ed695024447a04933430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wuwruj-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c59fc7cca7f3e0de4fe7567ebbee72ca4a3f6953c47ce21bf32fab247d0ebce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e007d9329918002f9ca7cb8ff32c77d01512ce3f2bf1c687993d84290a1c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102960 Malicious code in full_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cf6a85d09f4faba00f460add459a15f069c81b844650536e9ef2ae9ca97b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58712810be44df59766c9baaaae7c755d7945337f078bbb585ff020449116f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical_sloth-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb63ba73827ff4867730caa2e5472555fb99f4414a4ab77eb3975c9234a7678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106854 Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105908 Malicious code in mjiqrr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be478c0af81568eb07027dd30a2599c6c23267e4c50e18776d8b8268c90547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104279 Malicious code in integral_pinniped-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a244dee13304550e2ab277ab05ad4939fced5ea6252c8aad6e60ce485b1a3817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107654 Malicious code in quickest_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c521c9753c9608583681c58ba5e7c398320a38e3cea3571ac5cec6539e0a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_wombat_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c39b72384b2084e4f9aca14a539b0f02e38972773167bb8868c5e6475c4307d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106396 Malicious code in notable_tapir_salmon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ed0c3df4002e1b1b3322c37c4afec17f763fc33f054766722fb917ad3d5374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99036 Malicious code in above_angelfish_peach-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc1833a32ea3c56a7491a689343c0dfc722a0a1704b901919166981524a430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109335 Malicious code in supreme_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26612a6aef2edfad40560a8e783eca4cf567eec9cb848116433af8cd82d02952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...