MAL-2025-105628 Malicious code in married_weasel-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629dd5fb11d3ae2f51a4a8f34d6de1110e0d5ebd032196a2002de85a54cff7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105787 Malicious code in melted_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d863cfaebf6c845932763ba2d1d77df7db0a0b203cad1de277858409b1d57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108985 Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103386 Malicious code in grim_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560437c90c90c0053429de53def3588b25c02e5a242d2be705789cc6d756ee95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105797 Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102948 Malicious code in front_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57edb852900a2e077827f2f6b8e989962f68b731a28f270a02cc04629388fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104161 Malicious code in indithas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad9579f1639c8bf6ecda02c0849bd0fdc2c56b7cb56e84c6607142596a47052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105048 Malicious code in left_skink-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0ff26704d677ee4c1b79838457e23e79c3a15c9d5fd3c0d451d6a50e8aa05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102376 Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_worm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3607aa369e0f1a65d93fe72b86cb4b53dd21af11441d403bd27c2da828fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_peacock-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86458259b055488f3ced00d3b9ef9d38acdb7dbf903db61e2a394af30fe7d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_dingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3e6140c7c27e9579ae94f6885f803808467ff92e6550d8442465d1dadbc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_eel-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac5470165569e47c2b2881b9010274a6eb0c85a60802bcfcf41eb48a2c7005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_dolphin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3841cf6475701654aa7b508fcb0918326d1406585a05e0c1789dc5c9dd8d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...