MAL-2025-112451 Malicious code in vital_caribou_peach-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285c8e7d26954f805c8ccebc538afac89b2dd13a910de962dfc635ee3463836d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112002 Malicious code in illegal_ptarmigan_tan-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dcaa8280f99cc48ebd909eed6fd33600ecf6dbba0de927bffc4e9e3c93f3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qvibtt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c80f248938ab7d3a84d6d37cf83c5ee35fb6fcd0b1be158c9cb2738307bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04534a82b73104550aa0162f541a2d14a0e295343beeb998d021a717940d4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vczdav-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f35f4d121e936dec7fd585989579d44bba7d6ee4997cc201d3ac3c19c2efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3964d672ba4112794b44ad0b94b474f5341ae5eee62e13710b3f935885223157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_worm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3607aa369e0f1a65d93fe72b86cb4b53dd21af11441d403bd27c2da828fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd7e3c141e0e9b34d10a3fabc10f7279867f7fcf2dd7f2a87bfa66d7a59390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nyghqd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d367f0fc4c7f8c56bd3022f849a674177d40311e006712803d09b1753c3fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106053 Malicious code in musical_stoat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47ab7236febec623580c77ae14ec4000de8a4acdab661ca44149ef18c9d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100343 Malicious code in charlie-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1cb4fa23baf4caad8f5026354583f69cf0a2a2d62b49106cfe6100bba684a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_marten-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0f60d06cf855ce9f0192c4544a71770423657e1f5a6e4eefef66843cacd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_quelea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb94f1c8b267d538f43c55cf85264812e62a2444038c079559ad66c5928b1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...