MAL-2025-108446 Malicious code in seblakkuah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849cc79ca4b54a15080b225a6bcc00af5f3fbffbea9930d8153b4b4b29d42bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103865 Malicious code in husky_bobcat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e920ffd49c7f3d59fc9ce0d8935b5eb3b4c8eb1c5ca1f876a2e8dbec0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99983 Malicious code in biological_krill-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8647bae590e72ce8d9ea934ca18233311e41cdb02e45de85a703f7fc68ba9a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101394 Malicious code in developing_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b51f09e37dbed9962220baffbd22d4ecf12bd78b3f1b890387468d1fceb3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ae3bfb974e86953cc8fc7a335a3e75202d27bf2d1e61988022909888d227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_skunk-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc308a95bd49bee455a5f3977b927234eeb7c6e85465a1c8590ce246b83e6047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_tahr-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee7a6c08f2aeafdf600de0710269f2c80e3c2b19e77c82432d865902bf3bc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_tick-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118eb3d875c62514090957d436712e68b70da85ef529c7600065a0533e5bdb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d5e0a6b3f136088afb663afae0953ee567293b208424ef813bbb524852a05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_flea-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c176d86e179a5fef97158c6f7b2a4d1de3c88b500609b2697d8247bdc978e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_lark-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7f3f9e76da84927154360afb41f50f932da012db576b8ef3e51bae3307c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_earwig-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8ae798df01b122510998abf0bce4e723537ae75e7a18cc35318c21d67826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7743e50d27bf2c130cb51f8cd8c5f26399fd39eeba2eee6366c34a44654bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wtixqr-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64576ef9ec2f2852a9831f9819ba7322617e36002ae531f8fb75f200c7a8295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting_crab-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09daa3ced0b34997cf25c4a9146f0d16bda4ff244afa3b71d2087769a4dc742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50e6b3e3c5b60f1f4f5f79e58186b04e68996220f3ceae04d4ba14539b51209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...