MAL-2025-103834 Malicious code in human_bird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9920d3eded7bfd256d191f92c7bc1078e37edba6e9e88433ac0dfb0f2ec19118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107037 Malicious code in persistent_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ab83ed5ed2d485d9bae44d0a9462b0a5d59e546dc092f0177cb5bfe3fbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107064 Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100007 Malicious code in blind_chimpanzee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf0e4fbf0d2ece0ccf90aa0615bd10c16bc132ae751a5549c19ec9df1296d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106928 Malicious code in passing_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7bc17f2306184cc09a600e17dd676340819a884dc46cf753a02e4c784caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106787 Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106925 Malicious code in parynnon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3537c9a87dea1ba7d98d604812925c145cc445570be053b36989ce0bc47550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108211 Malicious code in round_caterpillar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea51fa40838fdaa724d58e310be82239f89babeeaa9d3134ed643856cab96a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101048 Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in papsdaya-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b74bd7a1b23e9ed4e8051c29f3b0f5697bfc1ae1670eac89e4789fe42696cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_armadillo-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae3eb2332af1e6b398bad9dbfa821216ddd3b8b0b80e54a92766d157b6e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideal_lamprey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4eda82530b36e251beaa7ec696a4056efe6607cde873e6564b1297035395c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_nightingale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b87df0a06e957d5a6541618dd77762562aa157f49638a872696e9aaab8f442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94bee89b6c7464263275e5fdc4bbdeeebb8d9086d89da0bdfd00a8fce3e78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_squirrel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4033879e107d6fa31d0944fd39d07e95c8ea197d60200fc38d6e37a872661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...