MAL-2025-111281 Malicious code in yeasty_leech-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eabc5eb0c63c45f97057171d7fedb8d450081042bbfaecd50013e36c7fa9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101331 Malicious code in delightful_sole-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9d21a7fb32fb6d3a198eabf4a2df2817b663452f3130981b8e941911c0891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107429 Malicious code in puny_scallop-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9739ea323487f99668ba950ef761ec6ac4b5cb1f94302a32f287b205b319a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101825 Malicious code in dvvbwl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b6815e2856c9923c2fa7ddffb7a2b33e0adc093be5bee98f4efe601d0b8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101892 Malicious code in effective_orangutan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57592d92768005f7feca40ea27e7d709411e7de445e88fff1d16c1d267f04764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105911 Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107328 Malicious code in progressive_chameleon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025272232fc829ee221016ceac4ae0c7f300cba39cdaaab5105659199a812c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109096 Malicious code in statutory_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758dfb45b87b83d08af3faf2f32c255c16e47d7bc435cb87bea12dc64075fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105658 Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fanta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38e72210ae92a8850bbc1847b2b6ebd71d42cdad960b846422bbdc8988fcc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_nightingale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d27c4441ffb3fb8fc76f37fd80dc9519a655381c2284dc58c747444bad21d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf38b3260b7ce226e433a2c0ac5cd28947a18c483e4bc7604553915227fc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109516 Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42016e31ade677692596a3be320f3ced8a2340d3eb575f3289c86f77a5d2f760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...