MAL-2025-113075 Malicious code in cindy-klipo40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47d60a5d4c180da877f937b66cf26f04a0bec8f6bc17c96a34b7e6e1fb3dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117731 Malicious code in utomo-naget62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb0b69c717d850a0cadbde322bab14d07d448f30816916d2232120677599bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113038 Malicious code in cici-mieayam74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9596fb709e9b880cd3bfcf52700402ca9d1b2e875e461b6c96dc8a6c15dec55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111674 Malicious code in associated_quokka_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629fad0fd8df97e4bf5f3ee6e1f528d98281d6db69b325764ca634fa5bf6f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111929 Malicious code in funny_shark_gray-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72110ca0c1c40bf9df1d993e398d4f3387a9bee554b532057be34f34280c9abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111679 Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111781 Malicious code in daily_worm_magenta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d10d956b2a03a8d770007e1e5505f24b76365470cbfae853a74c592cf9377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_kangaroo-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b640c5b5c40fdb544c07a19977c5dd1ae853cd3bc63989791909db123e5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c11de84fe93d0fd0ac4bea2ff0ca0f516bff30e2dd32bc86e7e8fbf9e7e852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99979 Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104258 Malicious code in institutional_locust-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4476cbd934a8b4e263defa08d6126a3057ecd2475849d20fd8328a91c74b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100400 Malicious code in christian_sparrow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9248408c30c91063fd0447413bf209bc35288a751acf6ff75c9b94e15cd9d6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_jackal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc66da08afd9f0578aebccad35605278cddf7ab9de43f6526c08a79979b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106214 Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105106 Malicious code in lgjipi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecaf0e3671c545cfa4f1d35c4847aa282b0937abe5540e3ef901c67cb78d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...