MAL-2025-102376 Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105797 Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_manatee-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1039c8d6592e39c06cc2a2f453064c130947dc82a921bf501dc2b2e74e0c2b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc5acf7c0553eec4d55e7c2bbae6b2d17652fca986cdde6660c79335939b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_dolphin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3841cf6475701654aa7b508fcb0918326d1406585a05e0c1789dc5c9dd8d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phydfgllo-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a878d20f535389fea60d55942e9abdaf84ffe7b2f519b44f362436f92b2c7350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3fd77fd428a90840bd745f4bc6cc03fc0143c3264ae51cb3abcc75b4eb89cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_roundworm-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e40d4dd59ce6497e1ae95a347a9cfa40f8e9767ef3e36cf87cfec7f6b1d877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99964 Malicious code in big_bug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59624d7b06479984b50d5ef39d89ffbcdfedc9aaab1f4865b3a7a28fb7e669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102441 Malicious code in extraordinary_roadrunner-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738508e306962636afff33da47a05ad115b14b6b65fc6dfded003896d6c30fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110588 Malicious code in vital_basilisk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960dde0ae1b874fe18c64c0f131fe05327ef6b9f5be501e17b8eaef629f582a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100845 Malicious code in confused_kiwi-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e623f105d13975749cc2c586eb88131144874d4ddb3d7d2c8292b65a8651cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100598 Malicious code in clinical_aardwolf-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3ee8b320e6391c3e20ab0c93d46b178eb11558c23b7d05e6dc240600097541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103776 Malicious code in hon_silkworm-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03006fd9b338caf9558cfafce97120a720d9482071e99b04acc73475fab6c420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108962 Malicious code in spare_meadowlark-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd7579aa5bccbafa00d81e419c879e38da0804f52b5de4c08966e7f8e01147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108814 Malicious code in slight_swan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666d24576438b25618a690ce6958d4b09faa57735f6322b96417f02844e2bb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...