MAL-2025-102325 Malicious code in excess_duck_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3446533fec8eab374c7261a0fe16a73941877701c68f0bb0944006094e0bb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104561 Malicious code in jixolx-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63022b3d0559fccd0e1489b5112e42366bd0f661e973e5b994e3339cc39fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109099 Malicious code in steady_ant-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486002550ad14ac0f5271d965b43b57916563a8ec995d91c79e664f8319018a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107108 Malicious code in plavuf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21753d215851f924f511af3e6d57d46b9139bbdccc1a97bc916207c1e730588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108451 Malicious code in seblakkuah14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513bd3508037328aebd647dac2012a5ae9651f3ea47fe83607319cd6ee2d5017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100904 Malicious code in contemporary_hummingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2fdd2c6957e3bf208c7db61acf8d637413eee038af194c57fa1c783b912bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106196 Malicious code in national_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf98870ee128187bd8b5a68c8cc0f89b753eba944e5047aa4eed5aac2a7ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104192 Malicious code in informal_kangaroo-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b640c5b5c40fdb544c07a19977c5dd1ae853cd3bc63989791909db123e5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105906 Malicious code in mixed_guppy-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327e9951815ea12eae5fd958b1754dde3b8f21b9ac622fe6ea64e98f8428cff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f442df4706b8500ed0ee8fdf71771f3223d935a880be320b1c80c2471f0b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_swallow-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424d590aecb096e97006a7eb5b21927269eb824a6b09979204f9222c4365c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengstasiun-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c26ab0b03afbbc6910b4ffe63a7cecb3879a7c1c71fb534245fa399f169e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_jackal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51830629634aeddc6eec4a544b7f2d92379b857e58794fdad62356a13864ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_caterpillar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea51fa40838fdaa724d58e310be82239f89babeeaa9d3134ed643856cab96a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157181757efabd0daa2b121931e22cd2b7c93879ee0f374ba720ac6c714c2fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2a801ba6926b3702fbda6b12378f6eb225461273c3f916d85c3fbb093b036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_basilisk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960dde0ae1b874fe18c64c0f131fe05327ef6b9f5be501e17b8eaef629f582a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b089e2e029be884e5e751dfbcd77357b6d666d62170f250b8ea9ba21d805da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102254 Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...