MAL-2025-105642 Malicious code in marxist_gull-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0d4540903a4660cebc857810d60c6708432c46390ef1a8a874192b90bddd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_pelican-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dad22e9e9af84ae0a0777e25c350a282e218af543c9cda4965e2793c82a4876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4055d931c477e9d80fcd3ce4c460ce34d0d9c1ebac5cf3ec660981be52c12a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xskzwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b760edfc3ffedb344cde8e305f57a9f3c2d84b0c080e9568c52379ceabd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_skink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a336ccb3387bf0a93b67abc396cbfbbbae7b33c202d2b0e3db9a7298afe35438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant_narwhal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbd1a75a8d91537fd75947436ecac78464b19dd5d6280a1e526ab2be2241dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109818 Malicious code in tremendous_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9958ef5f751ef26631ec53252076fd6018b50d1c0152b0dc1f573fbeb006e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107429 Malicious code in puny_scallop-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9739ea323487f99668ba950ef761ec6ac4b5cb1f94302a32f287b205b319a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107328 Malicious code in progressive_chameleon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025272232fc829ee221016ceac4ae0c7f300cba39cdaaab5105659199a812c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102580 Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105611 Malicious code in marginal_flyingfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750ef1aeeaf8bacdd04fff5d2e04d55a652ba88959a48d038aba218b12110a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111281 Malicious code in yeasty_leech-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eabc5eb0c63c45f97057171d7fedb8d450081042bbfaecd50013e36c7fa9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109516 Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pdjblw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fb33963862d289e4e3ad9a2073296baca8ade60882be01327bafa4aa1b054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a7b237b2d1de85d94330018f4f47ca0a2cbbadd946480bcb691e12a2760ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...