MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_pinniped-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3d851c3d27a3e1b275591e8a4c0605f1d68fdbdd8a16a039c312efdadecaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c521c9753c9608583681c58ba5e7c398320a38e3cea3571ac5cec6539e0a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_viper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b27de9c603ade624db0daa0f7d27ba0189308cacf8fa060b8f6ecba5f2a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_fowl-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f75a58602e5dcecc19ade4a85caf254709939601a227014bd4c034317f8727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_camel-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366535e4556bc213b35793599d549a12a3dff9293006633d505d3f1ee6fa09f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b3fdb879220b2227ae025153329be1b04aaeaf884a505a8cbbda4724d10756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jbeeec-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350b81729ea6842c05a3217f0bcd4b55d32d729f15750f5ba07581ce306f91aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104445 Malicious code in iuaynf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e152c256f77f2d22fd69d966ff043d2164314c4e3d9ec236b8ac542efe9ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...