MAL-2025-111256 Malicious code in yawning_scallop-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515b9b4fb4157af0b8c5c32bfc9e7ef2f08a8aef134d18528b5f3c9cf3147137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108446 Malicious code in seblakkuah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849cc79ca4b54a15080b225a6bcc00af5f3fbffbea9930d8153b4b4b29d42bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106766 Malicious code in orange-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ed092dd425c705dfa0e464feef3c80fa49993210888739c3ad03704d6edc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104251 Malicious code in instant_silkworm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fe235b59a10dff6ebbdaf5e82f40af89558e80ad386d1b0715be4a457cabec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50e6b3e3c5b60f1f4f5f79e58186b04e68996220f3ceae04d4ba14539b51209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_earwig-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8ae798df01b122510998abf0bce4e723537ae75e7a18cc35318c21d67826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_skunk-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc308a95bd49bee455a5f3977b927234eeb7c6e85465a1c8590ce246b83e6047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bekicot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c985c2bbf85e98688728b3f962a061709cf7e4f9e718019ff231d1528ce3f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_amphibian-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f030524411d6de527c60eab8da3cbde446d16248b5a0deef41303ee17743d1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ae3bfb974e86953cc8fc7a335a3e75202d27bf2d1e61988022909888d227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_tahr-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee7a6c08f2aeafdf600de0710269f2c80e3c2b19e77c82432d865902bf3bc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_tick-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118eb3d875c62514090957d436712e68b70da85ef529c7600065a0533e5bdb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d5e0a6b3f136088afb663afae0953ee567293b208424ef813bbb524852a05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jambalaya-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326ba833eb3e1e6f65ce485cb2add6ba0f19920ae60ca0399cf92d00a1916dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_flea-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c176d86e179a5fef97158c6f7b2a4d1de3c88b500609b2697d8247bdc978e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_lark-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7f3f9e76da84927154360afb41f50f932da012db576b8ef3e51bae3307c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...