MAL-2025-103870 Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111034 Malicious code in wqajsn-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723155d3245a9b844d7e2bc56ec36ab163dd0e28de459f671c5c76156ffb6210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_jackal-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f08ca5d149f977be76ec178d42cd13af2f5e92a1a56596c15fe599edbf622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_squirrel-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc547b77bb446e7513b3e28af84230dd35723a056b6e0c69cd412f5383103b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106725 Malicious code in onion-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408632ae9c95395f1f1064bd81011c48cae7f12618df23b4e339104af5087bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghfnyx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2000a0b34a1ba237e1e8939d4a723cfa118372ceb160edd7f4e9a19fce9bcea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106713 Malicious code in okusyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b99188657464f72e581fbead2da3d7aa6101f6b1966589a4857552b710f632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100370 Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100603 Malicious code in clinical_vole-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39669e8710fec5caa3549da501cb4eb1f7253012d22a29d873c9e02475adec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107251 Malicious code in prickly_cougar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1254836cd3cda802fdb1c8f725ca2bb53d11e9e5fdaaebe67b6151fc6f62ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109577 Malicious code in thalheira-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397a9877787edfc7b4284845fcb115195be1704b953692a77e160291077247e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110659 Malicious code in warm_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971a125183a4e33829056ada920b0e2218adcccbfbe05105ca50d7fcf2f41a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101800 Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108327 Malicious code in sad_pike_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7619a6a2f34f6ee47d88cc5b14a0798e6da4944963adc8ed013e800373362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...