MAL-2025-105624 Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107411 Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110899 Malicious code in wicked_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fd2f933a0586b933a5aefeeabc45ecbe554e32c3f39632632ca62d7016c3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108436 Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107623 Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101135 Malicious code in cucumber-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9469ff490246fcdaa28a7eb4f8897e226d47ff6afac1230a30c84c6d56fbf4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101160 Malicious code in curly_muskox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c34efebd7b09082a21134751cddded7794cabd60725d1a8ebdf80f57d2043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103858 Malicious code in hushed_cougar-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee38effecb2ea2327fd2aca106710d0c7ca81d1e6212f9a6e69ff03c251e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109041 Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_wildcat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55797fbc4e74499f6d13a2a3afae7739d129cc1a08b2178b71321cf50c43acfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orange-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ed092dd425c705dfa0e464feef3c80fa49993210888739c3ad03704d6edc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0f846cc154c0d44efa0aba27fb2f40d0fe0f4716541631750f518cc4485ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_aphid-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c16d5f957b144873b96089ccecb0eb20c9a5fa33c348e6825e5d7fcf10493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_seahorse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3198a1b8013590d9df4d76ff549ff203fb595a4065a72ba52ee8a04c56fa14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...