MAL-2025-106404 Malicious code in nuclear_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d955ee922da155c0a31d2503d116e684a9acae05ef5fb979b596f860c3a2102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111304 Malicious code in yinpeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee78fe30f2ea84bb61ce3fcf8451777df0ac033cc124421cbbc2f4b3295b7866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106797 Malicious code in original_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a214f1f8468fa84e0757709c80f1ff527c0fdf1a54b687ffccb8facdb3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106858 Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100267 Malicious code in careful_donkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c745058ed6e90cbe29586e213c47218219707b729c4aa283db3e7ba68ade55ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107668 Malicious code in quintessential_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1827c68fa5bbc0ebafe757adc9570320d223b554112d7a534b54bd1a95900225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99973 Malicious code in biliren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9a2ebbf41608c7579c0c8b07fa6c15953173aee217c31f5aa32f0770cf6c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_mole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8370273611d85cc81887a7c2a3151dbd510ca4e194a8647c004104341a43935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_chinchilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2151b362486f892e1f862bcc0cc888e674d866c330e150aa351755cc9c0800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_mammal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6d25d5e3a458b3896b66b0b70b98273077f7b310666b3c3cd6a6cc1dd853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_limpet-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078f64fa55b1efc01e3fffc47797a28a22f37d23f6f37ff5e25013e12907bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_crane-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0add47856efae048cb4814e8f401487c4311dd9418eb5c58208e323b5d09bd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ojihnk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bd1ca7703f361e07b2835fd01939ccb283936281c7a3cf849bb64ef87a3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wise_grouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5c7f222b23becb656c1d3ac70bf7b1214239fd0fd65662f6faf500b7ea3395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_toucan-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8e8345805fb3490966f569b6ccff3802dfe9cd6848f17b12a2e0a9893e9ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eba1cf246b221d69c6597e7e90afb5690b0f4722b51f55988a6392608c67db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_dragonfly-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b2181385eb28852b2bbd8e2a40c07397e3eb4eaf312fa0774bbb7c3b728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...