MAL-2025-106725 Malicious code in onion-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408632ae9c95395f1f1064bd81011c48cae7f12618df23b4e339104af5087bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99355 Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107251 Malicious code in prickly_cougar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1254836cd3cda802fdb1c8f725ca2bb53d11e9e5fdaaebe67b6151fc6f62ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100829 Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103870 Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105958 Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100603 Malicious code in clinical_vole-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39669e8710fec5caa3549da501cb4eb1f7253012d22a29d873c9e02475adec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107794 Malicious code in redundant_bug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5865f75de73e649d39b8d6d911c77b4816f4bd9291189c4b27a44aae282d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100370 Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108327 Malicious code in sad_pike_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7619a6a2f34f6ee47d88cc5b14a0798e6da4944963adc8ed013e800373362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...