MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pannnini-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5987626875800bedd975e2c57b8da4f867eeefe7416b137651718fab19d93190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_squirrel-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc547b77bb446e7513b3e28af84230dd35723a056b6e0c69cd412f5383103b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghfnyx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2000a0b34a1ba237e1e8939d4a723cfa118372ceb160edd7f4e9a19fce9bcea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100370 Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107251 Malicious code in prickly_cougar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1254836cd3cda802fdb1c8f725ca2bb53d11e9e5fdaaebe67b6151fc6f62ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110659 Malicious code in warm_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971a125183a4e33829056ada920b0e2218adcccbfbe05105ca50d7fcf2f41a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106725 Malicious code in onion-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408632ae9c95395f1f1064bd81011c48cae7f12618df23b4e339104af5087bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106713 Malicious code in okusyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b99188657464f72e581fbead2da3d7aa6101f6b1966589a4857552b710f632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109577 Malicious code in thalheira-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397a9877787edfc7b4284845fcb115195be1704b953692a77e160291077247e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100603 Malicious code in clinical_vole-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39669e8710fec5caa3549da501cb4eb1f7253012d22a29d873c9e02475adec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101800 Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...