MAL-2025-111044 Malicious code in wtixqr-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64576ef9ec2f2852a9831f9819ba7322617e36002ae531f8fb75f200c7a8295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107043 Malicious code in personal_clam-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abdfa5786b6d74c85e3c3074bc472cf423308d3633860704049c5d0816fb6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101237 Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106858 Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111536 Malicious code in zeroth_moose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89064412275a0c9b5a9a5b7c18f244ef05b48d087bb9c4bf4e1d10393d12f41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111027 Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102681 Malicious code in few_bear-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259341745a0f317c664c93f5de5a962f1e2ffcf2312b9a7f84f0bd7500239c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106494 Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99195 Malicious code in administrative_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732f8a4144fa1a48534d12229fed7898a35d94a32180a24900139fed4a348f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100305 Malicious code in central_mammal-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfad6716f71da4a8a30461285e8671ce14745b752b329700a96fb276efe444c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103870 Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105142 Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dinharice-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a9e657e18660bdf34e63e9e743af073422ebca34209ab9ddb215de12d6ea12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ff0c75d7b8cc86a6cd6673d4a5bfb3bce1f811a12ddbf90730a5915f9d8519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_egret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d327b9787d83a6fb54772e34dffe2a981db98048061e6a10e99ae26db26c5265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_narwhal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e95a400a723d7e084727fbb90ffa83bb7e38867bb650af581c53c9f5907c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zxozza-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ad14fab8347c3100ffada516ac970e3ff45c6234d5aa16215ee713934ffb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...