MAL-2025-102948 Malicious code in front_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57edb852900a2e077827f2f6b8e989962f68b731a28f270a02cc04629388fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105628 Malicious code in married_weasel-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629dd5fb11d3ae2f51a4a8f34d6de1110e0d5ebd032196a2002de85a54cff7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_guineafowl-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5fed1b3a0123069891beb0fcf2da0d0e89ba0f07ee10e960581e57ac9dc087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd7e3c141e0e9b34d10a3fabc10f7279867f7fcf2dd7f2a87bfa66d7a59390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_eel-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac5470165569e47c2b2881b9010274a6eb0c85a60802bcfcf41eb48a2c7005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_dingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3e6140c7c27e9579ae94f6885f803808467ff92e6550d8442465d1dadbc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_quelea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb94f1c8b267d538f43c55cf85264812e62a2444038c079559ad66c5928b1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_worm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3607aa369e0f1a65d93fe72b86cb4b53dd21af11441d403bd27c2da828fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105322 Malicious code in loose_crow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f3238e04f8abc28744711dd98104197a819f2c65ca7b84cae8598e4206b587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104057 Malicious code in inc_canidae-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1075f0ef95d5cdfba3718286087f363a0241e0c4ac23640238ee56eb825d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109056 Malicious code in squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7743e50d27bf2c130cb51f8cd8c5f26399fd39eeba2eee6366c34a44654bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108108 Malicious code in rigid_cobra-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e0028d610d714b33d73cb28c9d9818b39e7ab2df638d9a8ee7ce61e62df5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102141 Malicious code in envious_muskox-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6c922a72cfd00273100af688b638de5651bf3242ad46c4214177a3fd0b685c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102256 Malicious code in ethical_crayfish_teal-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb963dc04821f6911547fce3351cb355816179f1ddaf061fda8c92f626896275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a41b8a178bdc773883016c3927b2b13889f1d9a01e788d41d4e1901bf1eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4760d132f58dbd232293331cb568aa8c67e1b02c8ba1614dd441e74ae0cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...