MAL-2025-112002 Malicious code in illegal_ptarmigan_tan-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dcaa8280f99cc48ebd909eed6fd33600ecf6dbba0de927bffc4e9e3c93f3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_reindeer_lime-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5306f0443dd6b19c3d8fbff73445321e9f125409f62af35d8d0334b1efe85e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3964d672ba4112794b44ad0b94b474f5341ae5eee62e13710b3f935885223157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vczdav-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f35f4d121e936dec7fd585989579d44bba7d6ee4997cc201d3ac3c19c2efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106383 Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106053 Malicious code in musical_stoat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47ab7236febec623580c77ae14ec4000de8a4acdab661ca44149ef18c9d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100343 Malicious code in charlie-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1cb4fa23baf4caad8f5026354583f69cf0a2a2d62b49106cfe6100bba684a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100948 Malicious code in continuous_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e7a420bc536cc6c83337b03dc9a57d4ce644d2073f5f112db121766f152f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qvibtt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c80f248938ab7d3a84d6d37cf83c5ee35fb6fcd0b1be158c9cb2738307bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e70e8600badd9a8a4d089a3c339d744552d55ca826eef7c9900ee0046979fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04534a82b73104550aa0162f541a2d14a0e295343beeb998d021a717940d4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nyghqd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d367f0fc4c7f8c56bd3022f849a674177d40311e006712803d09b1753c3fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106776 Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102948 Malicious code in front_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57edb852900a2e077827f2f6b8e989962f68b731a28f270a02cc04629388fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...