MAL-2025-111759 Malicious code in continuous_tuna_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd0968cddbe8b84877400e7c82d19ad4bd0057611e8933433f8ac89c3e30035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111985 Malicious code in horizontal_albatross_amethyst-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2a6061d70881c54b3841a6d069929b48fd46bcc75012a45eee4ebde9499e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_chickadee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d376dab43f66fe98e50f42e9b17cd82764202b7c85505ba0fa7326117adff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_lobster-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c1bafa73faa8475bfcad96a2cee1729fced898e3248e75af69990aa9fb0235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectacular_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca4986e734285ad609758fb7e666067441675d01a0be0dbe2ba02c4a6df2167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106251 Malicious code in neighbouring_camel-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ebc5b61f7c8bcbc5014e3764971c615aef6c5d03a710c069e3d2c24ee958fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100322 Malicious code in changing_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1412180a6f0ab7d189ec04d5360f41620d1c0251896f2d1a1f4e0232aa50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101220 Malicious code in dczddk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7155658f884b06b0e876498d7d8cc7b8317fbcbc0197ea476d1e46ade50458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111315 Malicious code in young_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f027b3c0026b843e7725622639d25f90fa5ada40830ae3be491740e1804eb4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109716 Malicious code in tired_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb0e7e1d3957d9a23d1040c550af904fd2b17b681a5cd76d15ae86d372b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2950411052fcf3973128ad2e6e6f61de112e65214ad0083a083eda26d8f8a09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b72d86e745769f971a933cd450afc4e35f6428bb51530e47af7ae1acec087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_skink-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0ff26704d677ee4c1b79838457e23e79c3a15c9d5fd3c0d451d6a50e8aa05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103271 Malicious code in glamorous_rodent-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b53003acbb4bb35b93ae9ac8c8f57445984398cb38141a4a82cf861cc1ac2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4def0a84e5b11f51ba579ff844b1f100a1464c3720e82c59a398e93d4d5e517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99813 Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...