MAL-2025-100001 Malicious code in blank_tern-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4df4c58f7dd068e3b31f86cdd892beb68ca48cd84bef7abda868bf9a41321f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_piranha-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909bf177fefab1801b31f905f89cb87fe0901ceb9aa737f1edbc4c0c950dc419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hjnxmk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8472bb6257ce0ea5b2847af46927d38897493a392d2cdda90b28490f57819b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4781bd90b55ddcccc71a4cfcb1f82f05df6b2b1a931a23dddb4adee17258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaed4886f0265b162c26d5783281bd2a7925441654c944292991ee87087de7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_woodpecker-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddada2a9a03b33fa577951744e7f36abde2344e91eccd02f05230cecd164f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a614ae491d9f47d2e2633effab16f6cef0e988ff652b93c9cae1960f04471d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101007 Malicious code in corasn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4973ca98894bd3e6d3eb9835c65f4beb024bc893822d6db5fdfe013859637c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100297 Malicious code in cbnkaj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a4aa7909edc8959167b9c92ba2e16a1c411d9e289a2be98d31e95f012616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105595 Malicious code in manual_gull-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b762c251fbe710e2a20f5b7ffc78a3f9be6663db39868877c4691e4952b1c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111007 Malicious code in worried_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874221abd70e3fd86e14e8c577ef138411147b2efebfbb2705d540129f55abdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104770 Malicious code in kiehtk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb8344570ec93722b755b56602f9cdd1b330268ba05ecd6bbaf51b0ea4ee8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100749 Malicious code in comparative_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5ec6c5eb881745d7824d5d6fe6fb84abb442ad081288b58d45634db040cbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...