MAL-2025-100263 Malicious code in carbonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ec0654a6c42e716ae44f1a73490a5a459527bb677799604b538e35dc6a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99978 Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108548 Malicious code in sensitive_squid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5287883ff5de7903cc8b247f52473fc0ac303dedacac45e2417d44a5d80ae27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106408 Malicious code in nuclear_yak-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775e28f8f778f6cd0a4eb2a898ff46f7aa662bde4447b3b828f22723cfc8ef19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108218 Malicious code in round_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293896c9f57dbdc064be928d909cbc1b6dd91f2d432918b83aa2930abffad116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99875 Malicious code in beautiful_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf72fb7258f3ca98202f0a6a04b0647a4fe6457a8a036cde296324c0b5be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107070 Malicious code in phizeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee91ecd85660c055c415400a90e24b6819652a4b204029ba22bfdda7f0b208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101052 Malicious code in cream-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8035936afbcee4f39dd33c01b3880b50d582916ac0c5eda3fbb2468e4d3384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pepper-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67390ed17370147fb5e8e42188b0c422634d8f6b2fe1cfd0d59e6cbe02099fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_ptarmigan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db4c242dce43a0a4961e04f3ca5588e654da81b886528eba38d8718ffb89b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690ed3edda95383cb2d8e8880b5d9c211e60b50d09d00af5c8560aea683c25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_tick-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b7e9a95960a7a8f58c088e94b74acaa8e54f48590b3849b2f11603932bb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annoyed_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f81c3bda732c1c16ce0f2cf38c744ae50441b35c6920a91e8ce34ab59c937bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed9be82ddd5f9595d8516a288947880651280e92ba91d9f86eb97b6e853229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104038 Malicious code in inadequate_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388615cdd579942d1fbbaf9ec2246b9f21e66c9d77729c8964b369ea2702be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...