MAL-2025-112280 Malicious code in secure_lemming_fuchsia-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790d8683220fb28b0e3e96c888b4d6a27296d9e76113a93365f3700d236434a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grtris-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d36cc954485a50a989a33c77ef18e241fb88efc8407417504b025f97b0470c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in myrkkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22591ec59e64b1809c4da6cbc5068fd8d4f078c4d2b69450617aa20194d9ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109143 Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102674 Malicious code in feminist_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e78152a8aec9a5061cf11baad87f57f85d664312384ec12b6fdacc562dbe51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108667 Malicious code in significant_roundworm-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f4b75133470121d0517002c2ff053df764607beb59b97e35b15582a086653e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enwynn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9a53823a20c1433dffb1b8c1b28cfb3f499f3db922b1c46c6f710c4d432ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_loon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d0b033497d43c8446f8a697d320e3c5bc596f1fc79dbf9c74d79ea1e7efed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101792 Malicious code in dsilynor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0566bf601fc1d2587cf3a8813df29d54ba128a1fc7ec62303197ee0a5cd9cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101634 Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110138 Malicious code in united_loon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3369fcdfed5dbcd0bf184f94773a6f6afb7061699a5e6f377bfead1f9e7663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105757 Malicious code in medical_partridge_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04867bc58acbb95ae23b9df2cc1559d43e5afaaad4ec30e4ade1e7609fd0af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103830 Malicious code in huge_monkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e1dec8d809454b725acaefa12939f802e50f1014d4cb48e952572e8259cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102261 Malicious code in ethnic_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f185e00a594c2da80feba65a2a039efeba377b537f7e20ad98b03376a8b6a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111364 Malicious code in yummy_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7906df8edec2d798f7cc0ecdcfb756af4f053ef6c2a99e153b08793197323f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...