MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101792 Malicious code in dsilynor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0566bf601fc1d2587cf3a8813df29d54ba128a1fc7ec62303197ee0a5cd9cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103771 Malicious code in homely_smelt-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49958b233206364c2009da63536f648a2d939214ec931f6216252dddae746411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_swallow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175f58655d3a973fc233503c176a1cf0488dac7993d63ebdc288c16e13df0390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riswold-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddc0e3e0cbcc9184588ea8974f733faaee20ab4813ce3dce7f0aadb882983e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_sheep-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660d1127a5290d9efc1e0aa7a2b01a913864aa0ae94a0530b4f8ef2b4e2752e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93cf57433e730b32691fe1475d712837a2e1bc47f2678cae8b3fe654c7e4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in myrkkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22591ec59e64b1809c4da6cbc5068fd8d4f078c4d2b69450617aa20194d9ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_cat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61a857ecf93af12ca321d328488a53b1196cd7039c66b40f8b4f02a00b7d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_beaver-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5eda8d27624cb06b61b4cc6f276042a8523ca47146642941e9f5ca204624bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guasfva-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08cad2b50622ddfee54dd86561d185a4aefe5e994e80adbbe68b318b24aa21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4366498e57beca3d73510bbbb01d00007b15ac1383952a7021eda4ee5c75158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_parrotfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb54e8dcbf8197b919bf78db45d9f608290b7e85f8bfabc2ddfdefe2601f25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_mosquito-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf832091c642dd92dabbac0b3c3c905c179241d385e3082e26b57238ce97853a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_whale-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7619dc95a235ed2af21ec8ff0badcab6b55f9f5030e9c8b1dc8f6b1dcb0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...