MAL-2025-105813 Malicious code in miadove-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0474dde2a94ed113dcc19e042becc9b53e93c887ee9fbf41a29e8b8d654d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_hookworm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc1655b623089824999bb372bfaff044778953f2546ad07a8745f759d8498a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajitas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3592e8d5854e5b963dd9c93f628b230d9026420981918bf43d32a378391f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ecdb73dc88dbede398f6fcc1ead1d85c9c1f8f371cf5cb1f23eea68dcba36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_earwig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59acbf13d5d22d3a7c925eedc4c6aaf0c79816c23ba4ee89220785a72934e628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105577 Malicious code in mammoth_newt-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cc962b655953b0e8d2ff33738e37e1f9758bd95efab51c1a281a8e122fe9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1b909c93d7a72de1b29d596d55808b17eb20f6d5a8fbbbe0a6a9e8d2de300d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hraxisys-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3ffa1d448fe520d2bf7cea5b4ad772abaf8152ac844115f2a7e20b235fc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_booby-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fee552104a0ceaf26f73e280f11deb01dabc6d169725ee13855c5a13efa0e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9806c5e3b1c05b4d0b0dbdc162798d1c21f3e0b6846d860ffa07ae670d7fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108445 Malicious code in seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60022e68dc312105b3747b601935f8c03054e655aa953166b17522bd1807008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103393 Malicious code in gross_gamefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6605e731a737824e08430407810e09f894e2dd1399797725091c6e4bc02e983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azgxqa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23b787dc8d3cfbb3ebacb281db35325ac5984a3b4f33cfebae2b31f080beb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99948 Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99067 Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109362 Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104240 Malicious code in inquisitive_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc656d32680c571742b3a9a5f41e76eb5539acadb6ef36e05018864b655972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...