MAL-2025-102097 Malicious code in energetic_gerbil-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182e32ad358de7ca728dcbbc87ef4747f1c67f5c644aa10adbe7fab638fb7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108429 Malicious code in scientific_swallow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38debdb6cd4ea03e108df7494713334252f9cb7b8b6a81f7a99733a96f16035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_rhinoceros-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89dfc58d65e0aba3886757b36ad049896f8df5701c55138247eb93f36c8a75d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103bc019391b006d516fa34593764dc2511b19425d75c7bf457d7318bc828fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07bb44b0d84bef1a8a627a1b033ff756332f63a9924327c8836c771f5f6bfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cf6803ed4da94fdb0ba12b2fcc80a22deb8cdf804232004dc8ea6d2aa1f971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ejbwdr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994145096f0347db0719ae2ce25c0ec8cd0c63a147d1f18bcb8d8a1eaaa9591c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_hornet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed8021ce11d369fc8ac6f38335ab1be774b3b8244f51f4f36bc09d211a90add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_swan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666d24576438b25618a690ce6958d4b09faa57735f6322b96417f02844e2bb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b869696e24ff1d1c930125633559b7c0ab2a2f7a3bae8e8fe7c3ab3b8f29bc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_manatee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376985a9b75e8f9d90499f13a239df23e616b57fb0eda43812e83fb114a8fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yngsqu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0bd44447a77bb3f0c62f963b84efaeaa5a5d4ea3d0995622babbdcb4acb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...