MAL-2025-99939 Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100057 Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104334 Malicious code in interim_kingfisher-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d7130bc05163c7018e6ebfef577ec308664b8c5eb2f571390d0e6bbb4f0f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101613 Malicious code in disappointed_grouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104e6f06d4c3b6be35b664bb04cee0db288b2f3d23b1e2386d34ecd9e5f944ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7231bd9bb2816150276dcba4dda5d981eeb6d590ebb6fb3aea9e18278a4fc799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_roadrunner-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd7018b46bdb796bca285526d3a8612642e364ba0dbc6faaefef3bcb2313860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e310d0fb1b94a901a42050303e9466ef5336243138543f46342af72731aae549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msband-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c50b1c2fbdd65295dda38074888488e513904605ca5d0b59bfc40eeb843917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f630a9549ae8768b39205f45445c3719eaaeb93abf7fb4c0a823b293cb2237a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844593809fbc519f50e5c3d56054a8d3e0b772f64b77e5cfdd7a250e6c169eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_planarian-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94badb17a5f44ea245f11720ca9e8e1440dc5200a269a7f9be06121bebb56474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...