MAL-2025-111780 Malicious code in cute_urial_coral-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d97dd0b1c370dd1acdc8d186df760ac8ca10878343fafbe91fff91098a93a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_orca_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f56877d60475f2e16c3e6683a89dcf90b825c68b6cbfc1b11e56b6b0e2c23cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_felidae_coffee-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cda899ac20dee763ff77f1af822fc448003ba7c2793305596276ec42e0a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_amphibian_plum-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fae235cdc0ef2ff05114cf3f9f089b1cf6d3b80b515b638e112892b7e2e00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112202 Malicious code in preliminary_thrush_indigo-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237ebafc6b528ea2ee7d4b12792228a99a2e8f9ffeb370663e4cac198b4f0b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112139 Malicious code in nutty_chicken_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c251ca57addc14e6a818941b9df2df607ccba089b727804f409f66763e6b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112102 Malicious code in miserable_vicuna_ivory-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb22cfd6cfc7db74fbdf26d634f8b6c6778667162ab87e09073a11ae858c03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112066 Malicious code in literary_porcupine_lime-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d7dbc99afd2cdd5cd471b1bbe00958d5861741532edaa8669603e504d04c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112070 Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111908 Malicious code in fiscal_scorpion_cyan-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1681629a045f126c42afc19b3da9f047e889be4b1fe525223e98291d75e0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112159 Malicious code in orthodox_penguin_beige-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf52def97849496caff4e69239e0c451fa1ba2779e2836a75003af5f27c08d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111846 Malicious code in electoral_camel_copper-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d278d2c7a38f23b546b3de0f0571dbf8943e0947a4e75ae097b0ce64b6a03b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112206 Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111289 Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101791 Malicious code in dry_weasel-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6879b2aab1e3b7ab3f3679d9bc33d9a149a8e453e5c26f159efb10122d5d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104547 Malicious code in jhelara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdf3ac133dfd5b3b9c3922ce1bf658bfe6d472aedeef343ff13ed76e9006e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99872 Malicious code in beautiful_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59f759d05babf217ef9b42e6a08ac40995c0ec0132e21a9f8ce9ef97f7b178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101614 Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109047 Malicious code in sqpoox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5110203a5b460379d0526877be33a4e55ec12b790b6d0b14f3c37e30063cc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...