MAL-2025-106813 Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108329 Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0b63f8b334f1953e593246dc546f33d39b20f248791ca65f865a46610ae993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102555 Malicious code in famous_angelfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727742c8575f29d6aad87bbdae0ee6e0992c71d3e1f12d865a5e08a3f73aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99088 Malicious code in accurate_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2837e68d7ca36045962730e6f467f3230c18a919672727bd0379e4d9349ff69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e77e39ce3d8c1463157fa35e54a60270f7279efd4bec08c740485f2ef11df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_crane-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0add47856efae048cb4814e8f401487c4311dd9418eb5c58208e323b5d09bd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107823 Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104717 Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109652 Malicious code in thundering_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b575a2169e299894d74bb5624b7d6b2b31171c6598289256ab212e331be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107149 Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108429 Malicious code in scientific_swallow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38debdb6cd4ea03e108df7494713334252f9cb7b8b6a81f7a99733a96f16035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ejbwdr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994145096f0347db0719ae2ce25c0ec8cd0c63a147d1f18bcb8d8a1eaaa9591c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...