MAL-2025-99362 Malicious code in almon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6300d52f87df5278390729d7506faec992fa421162119a400780e91a3493c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105739 Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106478 Malicious code in obedient_spider-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aee542d232e9f5c9d2beb292c437f0a5f7f511e31a2d94a2f00fdecedb101d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnrqtl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba31f1ab5a1a3cbf71a970ebf406d268d393f2c6e40660ccfa4938d1f63d6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hjnxmk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8472bb6257ce0ea5b2847af46927d38897493a392d2cdda90b28490f57819b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_swan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666d24576438b25618a690ce6958d4b09faa57735f6322b96417f02844e2bb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4781bd90b55ddcccc71a4cfcb1f82f05df6b2b1a931a23dddb4adee17258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_piranha-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909bf177fefab1801b31f905f89cb87fe0901ceb9aa737f1edbc4c0c950dc419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b38bd363985d8fedfc0cf99c6b13049e2eb8c6511c1c0379a0763fb0dca7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eaecyp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139cc316254fa9330a1ec9d67f2059f3fed207a10031147ba7e287cdd7f093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_rhinoceros-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89dfc58d65e0aba3886757b36ad049896f8df5701c55138247eb93f36c8a75d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...