MAL-2025-112380 Malicious code in systematic_gull_cyan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ab789135f250a1f79402633968108a09b4452da40f27a44779997411d2e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04734418129c6bb758e33c147c4d1e55dec10ad66a5c047fbd1fe4c057d4a7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_deer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ef1df1d35118399cc158b32ccb5233cb74f1839d92e5d188c3c147dc324ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf59120defab5438e22f07e4716dbd221265e56648ca7f079ecf8c33aa8ca17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_pheasant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4014647e547d44ea9456defe345c65c5eed1a1399093df7f1a81b7cae10e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_rat-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db601c19fd5bb0f9f1dce799f9a6876cacd8044aaa2bb55d4c3ac4b46f1928d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_mandrill-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a46efe3116a8af0eba50766a5dc342d81315c22c90c0ebe0efd1b1708a4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcaa95e36e04fc88cf9b332fc3f23c6a4132b7c4cd702eace503b06e7ccc1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_llama-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeccb3a3a049dd91e5b548558535ebab1dc2dd29793b4bc3c24e8367fee6a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_woodpecker-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945457998bab5e732b1a9ac081a3c6676b4ea45843eeec6de97ed6c7605255fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111289 Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105624 Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99969 Malicious code in big_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e2310300bb3f721ed1be222175ab9a2f6e228573808e8f59e0247a81b95f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105907 Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...