MAL-2025-111922 Malicious code in friendly_bovid_maroon-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39b0751940385b72b33c9a9e38122e938eeb08eb14014a5ed1ab8ac608bed2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112172 Malicious code in parental_galliform_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f03b9e52fa4be9c9f0d1696a6b36a7e60b0b4fff589a4d9530c09d96e581338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_condor_aqua-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d24b4c80e846c2327ea9a52f0190edb0a3a97d30b90acd17e4c1420025dc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112044 Malicious code in junior_hedgehog_tan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a7fb89cbff2a092c51eabc71262b2138e4557dc0d4432a5bb68d8aecfcb770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112253 Malicious code in renewed_porcupine_green-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603480d97638b5562a44c79353d40f3b3e44bdfce7eb0f77a6e631505f95f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d997ed3a04676fb91c37b31bdb10a836b2847d9dde1527e2f91f9de410852a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_pelican-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4a7b6b9251dfd98d21ab8b6b006b3d72505ca5fbb139bb6cd16412ac433d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_felidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3105666e5013a45815910d01bb64904f0dc79e3837ff0f3b68830fc213cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103073 Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105646 Malicious code in marxist_sturgeon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5744873204580592871c4fe41b504defe00fbc009c7cda54cd08c3b52fa0f210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_panda-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4441900844e790ec76044e0eea834714093f1fdf5e218c0b8ba31c264dd37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110057 Malicious code in unconscious_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6b6b02608d586b59914122617c5b59ca15392b624025f4ea3482f305c9a3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110642 Malicious code in vuuron-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c02b10bc5832acb7834829dd6b2e938305a411f5c01fcc3be5244b5596a9617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...