MAL-2025-112374 Malicious code in sure_wildfowl_aqua-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9308bd4127015c1721724d6ce1ef9984bf305b72870b7b890a812f2479666e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_manatee_silver-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dc540111448ac9e773fdf9f2ee2968751861ccb68f208cb7b4d7d85cce0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_barracuda_peach-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889d537975feacdab947193e8ab585e7ba742d02a8313036dd6e669307414436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_quokka_blush-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba80562c5187a0cb881d201884188fc0fa7073dd56e3fb872701acee56d6924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112111 Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112213 Malicious code in promising_porpoise_chocolate-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18d6711fa71fdad638a0f472acff10578e142df5afa44f5d66fd15ed9cbb6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111635 Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ljwyov-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe48b8ec7604784a4496f3a61795413375e7e04e1b01bbe2964c30c6307ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_lungfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd5de49b7dbf2d67a7fbda39df79c6084651c9066b882c4ea9445c5f31cad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_monkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e1dec8d809454b725acaefa12939f802e50f1014d4cb48e952572e8259cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_gorilla-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110ad5b660ad9c7bd98ffa832f98202426ed5589d40cae8150ff1fd97af5b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_flamingo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e923b13487dfc12d54192b204f698c0f30f47d9783d8b57c05ea13693b17b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111250 Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106768 Malicious code in ordinary_dingo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1caba89ea5a8bf3c1433172bb5175475d943f9ef470866e0770c350dca922d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...