MAL-2025-103851 Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105958 Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100829 Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_porcupine-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f235df5ef4ca9073904a3af69e804206ecde2578b6e521d3b00fd21aae14693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109554 Malicious code in terrible_gopher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7086203c6ca8e2ae4ddb69c66ed8119158c31377974631e557018fe9e21abc37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_beaver-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b02981202c9e1c6b1e8634c5e08dbeb96a475e169da325b1d6c69f8f402ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pannnini-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5987626875800bedd975e2c57b8da4f867eeefe7416b137651718fab19d93190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99355 Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_armadillo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61178633290e26f263213e4274be908056864e4cae26b3cc61fb7bdc36f0b22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_yak-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6d1e82b599b5342c9d4d33e7079dfe1a9d915870dfd415f9e4fdef35baab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108423 Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106076 Malicious code in naasfdn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f5358b2055c697da27c1d8f39afa8c97d8fc4d52316b33c36489884a7ae912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111331 Malicious code in youngest_moth-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afa69793a4fbc5f64685d25d91fc8e66be3298a9bc6a40a0aa87fc34ea68ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107794 Malicious code in redundant_bug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5865f75de73e649d39b8d6d911c77b4816f4bd9291189c4b27a44aae282d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...