MAL-2025-101676 Malicious code in diverse_impala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ded263d14242f26755d7136c35f43314c0cbe75643766bf6f59874e3c070c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b0332515604eb5cfd84dc0c092914cae80dc7efc2f210df479419c3c49dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_gamefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6ef35f7c854744e777fcb0ddbfc25702fc2a4c65e062c1f85c649c8da01d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_sparrow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bde290b78bbb99e6047127c4d4b454ff65d72c1b70514e2d9bed31072dd441c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dildarae-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64af346f47ad2d6376f77a154047173c2af17b867c52ed4a99ce71a8e38c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_chinchilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2151b362486f892e1f862bcc0cc888e674d866c330e150aa351755cc9c0800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100895 Malicious code in constitutional_macaw-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f22edfaa486bda0b75cda60f8a848e59ffe255d2ae587e92a3d6384d25777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106065 Malicious code in mvqtuj-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d960641ee3607502e1851a0028226250f7f81763e5b0847c8bdf1a66011f48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103274 Malicious code in gleaming_canid_aqua-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4253a6a1f87ab69701baeef64f200670501c784d87f3150e4bdc48c486ff6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_mule_blush-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bdb8835a45afe5c57df2fda73cf51be9d13a90d0ebdc450b4b2802ac68d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100614 Malicious code in closed_swift_indigo-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04094aa18e5af564aca6bad01d7cdc7600d493c5235d5688aea7191845503c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683ae7c5a380cfd3b0b2c50937dec5a776e639cf1e541009f33aedcceaa4a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a973b64b4d257e3fe111dc69878087e09efbeba20f46cbbbf41f943b0b4228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f62aa1266c6df31e73747102da511be37190eb50a8d28cbdde6272a02389fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd0ceaae22404dbe75b3f02a3ec9e215449270ad52275accf0c8c9725ac18fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb9c4043097040a8880e64a1992a742486684b63c1230279a88f8c2b1128aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a62601b213f84b6726677d06d24890865f8b951897505c3eb4924c4230a7e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55c279af9d3e01ad48c51b5ac44d6bd08d344b13fd1f0b2ab17e19f3e6b2425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2472ee92b480beebc9cdadd8a37dc837db69c4c076b0704ad37f491c0f5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...