MAL-2025-112208 Malicious code in private_chinchilla_gold-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8370e3da65d840af7a6f1cd249bb925c09991b93d827428d2cd66a8553068f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_antlion-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854c66d044a085214650d5016e27fb8f8fcb5f278faef65102653695f0ef9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e524cab4695476864ed6a93f7e3eed63eb8543cdcc65a57d09e9248b18bea10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_roadrunner-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfef78d34e06e484228234388a54ae7f398cee4703d21b1d151c07e545b42ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77323ed4470caad02967b2f2e80e40f52fc9ad89926f77d96a6847a3bcaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuna-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11aff4df951317030df43414b9631974d7920f314f6f66d7f220c72f04b978e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_bonobo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e3c113f17c08c25842df74acb8099799628d14758a94a60208a8b2f0c44ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yzsnvz-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80bf41038f5d7a81a86892fc586db4dfb74ce4f08f79e56485e2a2a8b94dcfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_kangaroo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cfd786b482ffcffa7e8eacb0251676ae605e0aac30c5e8e70118ee9c0e4e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf4bf65a7609df7de6ee186b478fe7c1ac2291fc92c3b889b6ccf78597f1d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104375 Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101199 Malicious code in damp_swift-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d78d0f2668d292ed62d287c43b41e163b59c56e12c577b3d6b34588e19d32f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108819 Malicious code in slim_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed8021ce11d369fc8ac6f38335ab1be774b3b8244f51f4f36bc09d211a90add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108910 Malicious code in sole_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55863dfea90092a3b2fbd6f7ab75659c72f98da7d805d5c06a86045933532ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_manatee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376985a9b75e8f9d90499f13a239df23e616b57fb0eda43812e83fb114a8fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_constrictor-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0759eda3d53de9026ed52ac034059688f07d298726334e65cdd26f570f188a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_gamefowl-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f5cfea97e06e277ee24c8cbd5a5ca0fbed30bbb7627c61481878f76156f528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_pig-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1b1706187f8e10ce38365ba860fcc22b29fbdcf630f4736bb5620b9fb2d524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...