MAL-2025-109908 Malicious code in uathal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52b70d19ca5e35a5401145edfd43e4533d8a76962a54e6429672ce81edd06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107270 Malicious code in primitive_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58173152257487fe7da75c057097674a036c7ad64bcc29b6e76e9a2ef97b40e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108308 Malicious code in rymzol-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53394981458b70e8de67cbfddb4424dfd2c836474a9022650968d4f02cf50e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105873 Malicious code in minor_starfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb217c941d8b5661c99a35e1513f89440dd82c72ba61881fd47efbfc97bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102920 Malicious code in frequent_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07bb44b0d84bef1a8a627a1b033ff756332f63a9924327c8836c771f5f6bfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102838 Malicious code in flying_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616fe1b68ac5bfc4e12c763622cf9b3cf7126c1055e2e53ef928c9cc7f5d3ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100324 Malicious code in changing_guanaco-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3822199c75451f80f4a1485cf578527920426d9665af176c21b88d7b019cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101180 Malicious code in cvlkib-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55c08f9ed20c2318051cdc16e76230b89138e870762412e31265f29ff00e912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107259 Malicious code in primary_duck-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2de66fa47d8bf82f74587e863eb41c84d995a16ff4c6e5649f657cd81d80a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105846 Malicious code in milk-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f36fce0afcb286cc5e3069b39b36b84913793bad717ffdd0b4f9e377229216f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104310 Malicious code in intense_stoat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e7546fc5853280b65ddcdd8ef6a2b9fa226d43f5139c4a2a1466d1f44d87e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102831 Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wdgisf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c470760328b85bdc05db58cdc358f37f0eed859f34928765d71dda42dc2e499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nlelci-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82730118d46e13073bd27928e56c2e31e8cbb2bdb2de6f50c8678397a432b15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_mastodon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23766432618c03d96f4e0617741cd78ac7b03e2b8bc4907f802f432ca784381d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ab83ed5ed2d485d9bae44d0a9462b0a5d59e546dc092f0177cb5bfe3fbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483962f3dc7e3ce649c831f048083cef14c1c53752e121bf68477de274931bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...