MAL-2025-108108 Malicious code in rigid_cobra-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e0028d610d714b33d73cb28c9d9818b39e7ab2df638d9a8ee7ce61e62df5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd7e3c141e0e9b34d10a3fabc10f7279867f7fcf2dd7f2a87bfa66d7a59390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_quelea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb94f1c8b267d538f43c55cf85264812e62a2444038c079559ad66c5928b1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3964d672ba4112794b44ad0b94b474f5341ae5eee62e13710b3f935885223157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vczdav-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f35f4d121e936dec7fd585989579d44bba7d6ee4997cc201d3ac3c19c2efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qvibtt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c80f248938ab7d3a84d6d37cf83c5ee35fb6fcd0b1be158c9cb2738307bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_worm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3607aa369e0f1a65d93fe72b86cb4b53dd21af11441d403bd27c2da828fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109305 Malicious code in superb_carp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a765774ec8be522e02eff72f42b94d322790fa377e2f30ac598114d3218c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102948 Malicious code in front_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57edb852900a2e077827f2f6b8e989962f68b731a28f270a02cc04629388fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106053 Malicious code in musical_stoat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47ab7236febec623580c77ae14ec4000de8a4acdab661ca44149ef18c9d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106776 Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102256 Malicious code in ethical_crayfish_teal-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb963dc04821f6911547fce3351cb355816179f1ddaf061fda8c92f626896275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bc4052268027fc77c661989264f26cf2a991bfe6368e0e929c0b16048cd51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f33844358e836c094e0ca586dfc170cda45161225637a327d4f3e20d213950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...