MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103853 Malicious code in hurt_scallop-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583caa49d30cd94d3b1078ce51d1b67e93a8e464005f36319fb49b4be3812296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bbfd385702dec2da8d41d0fdd75179276a4cf9116a7b162fc824ffec7db43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106075 Malicious code in mzjbwp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a6d627a5bafc0d4b699167b43fdba134a17920964bdfbc683f11c1525cbee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108942 Malicious code in sour_haddock-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5becef8ced2ebd3075503745ab57d7f061e0055f3008d72a8373831c4c2a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105436 Malicious code in lydtol-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1caa2ed81367bb4402d8d033924b55a1f1edeca17b67b8799eac3323c6c9309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110767 Malicious code in weak_swordfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c408d57fd55564e82507811c08b67eea326da0242c36de81e9a9c30e2a2878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111355 Malicious code in yucky_dolphin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3841cf6475701654aa7b508fcb0918326d1406585a05e0c1789dc5c9dd8d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_crab-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780be9f40f1ac7961efd9f2c6853b9d6b0974e161db06e5cb68f9600ef783ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_silverfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d915d00936e1ab18761c24bc969630654ba3337a5d5fcda03bee9f1e25e64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_toucan-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8e8345805fb3490966f569b6ccff3802dfe9cd6848f17b12a2e0a9893e9ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_earwig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59acbf13d5d22d3a7c925eedc4c6aaf0c79816c23ba4ee89220785a72934e628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xskzwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b760edfc3ffedb344cde8e305f57a9f3c2d84b0c080e9568c52379ceabd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_wolverine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04314ffe6c86e568cf3a56b169eca545e6a20c77570d54bc34a1b457a74de436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_pike-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c5803ed64f2c9e6a484f8c4a026d7f4c1ce0cec8cb26711afde49c19541bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_ox-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f970e7fc76623e06fcb5c089d833b0c6f741d22b7d6715e0213ae338efc23422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d86ee1ab8aeaf355fb8172d1d759f1b3558460c58a14f2e5ae34d7c8800592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...