MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_toucan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9f9e04edefc55dcc7a6041bdac545b4adb4e9a1e210f1d2bf9b9ea5798e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iymbfz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b2f0d7c84f3f4897ac0b8dc81f8f47bf2e2b4fb9ea0eb64b81ce5d89e950e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_cardinal-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c4d3e2bb90fef0155aae63ef1c55fd4b92fa652b0cf280ec77a778a3e0c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100735 Malicious code in compact_rook-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d989229677f79a8e13079ab8345d0f7552831845fdd065378ddb6b0654e36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e50c82abdf38988aab6070d0f3140f1c344bb8504d91380c77b2403275e06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_crab-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a83d6fd058be7a831335c9a98b6a48bb46d0d444725dc25b93c426998d39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103854 Malicious code in hurt_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b95cb2436256624efe377a48b49b19eaa9684a06bece6045bf44693b0842c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103250 Malicious code in given_goldfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198789fc48a1b491f7f959ea930c00345c5b21b97e509db0c31610025594b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105110 Malicious code in liable_ladybug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8c643afe39a6b39ccb891bdbaff93ad876847ba2c66ae0304ae57624431e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_parrotfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb54e8dcbf8197b919bf78db45d9f608290b7e85f8bfabc2ddfdefe2601f25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_canidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b855bf1cc9e47fdbd67394a27e169b08d095e13ddb07953aca8a3ef4571165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...