MAL-2025-105611 Malicious code in marginal_flyingfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750ef1aeeaf8bacdd04fff5d2e04d55a652ba88959a48d038aba218b12110a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111321 Malicious code in young_quelea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcaff5f361112d639cfabc702004487fdde7e37ad3146296992f32ed440c60a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107564 Malicious code in qnnkan-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fba9cd6e1f1fb39237b9e93728fd33c0a5c50f3ba8843bb7f8635ffa02f00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111331 Malicious code in youngest_moth-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afa69793a4fbc5f64685d25d91fc8e66be3298a9bc6a40a0aa87fc34ea68ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103853 Malicious code in hurt_scallop-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583caa49d30cd94d3b1078ce51d1b67e93a8e464005f36319fb49b4be3812296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105259 Malicious code in literary_ox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a452ac2bc83569378a7b2299e843f8ffd738ccb9e2117a6bcba2bf60663c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101620 Malicious code in disastrous_opossum-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f2b5abfb4588f439ace837e8560f7bdb7ce546cde10d93a9caa29f678dc5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110450 Malicious code in vgandau-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c3a1344608c5ac25b1b792f9de9845e027d883cf49292f7be00d182c8513dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_turtle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc4437ce7ccdde76b06300f3ca9f7330d256bdab02e8ed1fe8fd7f6e117a41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_flyingfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ab5ee36e28d73029581c08cf7243d42fec549a7c907b087076d9984a2fbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_cow-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b91970683c3574ce2de223227af637344ee8ceda1644a76d1deb6b2f56f655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcb7b855392dd000cc5e7e9a570a8402bbbac12e8739c173ca1ab8329d20db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58173152257487fe7da75c057097674a036c7ad64bcc29b6e76e9a2ef97b40e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_reptile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e304b5895f3b3b7af1cce8d435cfa105b98666baf0f42fc42c1a3aa34c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_roundworm-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f4b75133470121d0517002c2ff053df764607beb59b97e35b15582a086653e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...