MAL-2025-101801 Malicious code in due_vicuna-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b060992dbd4caa9f855cd103274521b6588334e6a0432175dc53aa7885422cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103960 Malicious code in imaginative_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f1e2bd5c03ce5e3f88cf4565da149dd2bae5d36b49bde453e9418a274ce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100789 Malicious code in complicated_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0618af781330fd9f31ed5b65d43162bd09945b95335bdd144baca13234a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106376 Malicious code in northern_cuckoo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee93056e5b98657bea920e2753c27ee7b5cc8b5973e080522b36817f509216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100262 Malicious code in carbdgonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2c3b11a88f3747af265c96348542e37cfc010adc531d327526191b75b6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf38b3260b7ce226e433a2c0ac5cd28947a18c483e4bc7604553915227fc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f244f42b656074eea86a669f56c91fe57b941f61d5fc138c97ad1108e9f5f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107873 Malicious code in reluctant_hamster-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e983d51c676a4a0f4dcbe5bbdaf56edb1990876ef2936c5ced1c43cb9c0b6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105911 Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106003 Malicious code in multiple_wildebeest-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f13d35c7812ae3fe0ff32fe0b43f414d69709514a0295fda07c5bfc5500193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fanta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38e72210ae92a8850bbc1847b2b6ebd71d42cdad960b846422bbdc8988fcc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...