MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbdc85ce9fda49aa0a18ec144a0fb4320b231b796accbcd8bdbd5ca83807c983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_pelican-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dad22e9e9af84ae0a0777e25c350a282e218af543c9cda4965e2793c82a4876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110586 Malicious code in visual_roadrunner-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac36039bab10a20bfa6e8d497dbdb0d1be0120e7d8b61e4ffc9291b01f0d6e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102257 Malicious code in ethical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ff0c75d7b8cc86a6cd6673d4a5bfb3bce1f811a12ddbf90730a5915f9d8519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105813 Malicious code in miadove-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0474dde2a94ed113dcc19e042becc9b53e93c887ee9fbf41a29e8b8d654d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99734 Malicious code in back_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b891abb2a9779f1ab321b69d78db12e9f4b1279def734dde1a4301b05716eea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108662 Malicious code in sick_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214ccddee4d1e337e7992da2ed0fa4c6038060ca84400d65b321e083b9f55992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107238 Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9806c5e3b1c05b4d0b0dbdc162798d1c21f3e0b6846d860ffa07ae670d7fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajitas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3592e8d5854e5b963dd9c93f628b230d9026420981918bf43d32a378391f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_booby-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fee552104a0ceaf26f73e280f11deb01dabc6d169725ee13855c5a13efa0e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_hookworm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc1655b623089824999bb372bfaff044778953f2546ad07a8745f759d8498a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ecdb73dc88dbede398f6fcc1ead1d85c9c1f8f371cf5cb1f23eea68dcba36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108445 Malicious code in seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60022e68dc312105b3747b601935f8c03054e655aa953166b17522bd1807008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...