MAL-2025-106224 Malicious code in nearby_ermine-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e402c85592cbcb872bacb7f500e7e1532d46b5e45d40c781c8fdb131ba2b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109856 Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106823 Malicious code in other_woodpecker-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddada2a9a03b33fa577951744e7f36abde2344e91eccd02f05230cecd164f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105821 Malicious code in mid_tiger-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da580732aa35bc18999440524d466d68cdbc3370be95b3ee3713e2ceef9b1b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105658 Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105332 Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f266dc942105119d6593e695558b240f9039136bcc6a160de4d4eeee2e4cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_chicken-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d8ff4e64b37bc323c21278ae37a434c0ec1aa8fe3b6de02b24e3edf67f59be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102878 Malicious code in fortunate_capybara-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c23481c31283f861764367bf1c14a064d0b3826c2328cf6b19cf1f73c10cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f1e2bd5c03ce5e3f88cf4565da149dd2bae5d36b49bde453e9418a274ce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1687c63d5fb0c635a08859e2bf036db76ad28c602166c7b5a5eba4f7a2d43a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_armadillo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93c20c85f12d471a84f7d7f1d2da15ed701d744d611c644256b409fb73ebce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2948cc97c356a5a7f5adc682c72df54b36f92cef979516e7001104a3a1e253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiehtk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb8344570ec93722b755b56602f9cdd1b330268ba05ecd6bbaf51b0ea4ee8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tiglon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21adbd72e2c70d9d6e55e9b81415e15d7fc33fcfd62b9578ec7a2add8e88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_salmon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e4ee3a2e7813df9dd34a083caf2bd982f8636e90359a5d7366a358306e67c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_felidae-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d47119a97248bc8d0fe0db3b3b99b66b527bb22e1fbe8fc9d0a715e8cb2afdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_haddock-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5becef8ced2ebd3075503745ab57d7f061e0055f3008d72a8373831c4c2a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a57fb6c6d2644dce008220277209aa8b6c37a1731151c66eb7df8ecf1ce40ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...