MAL-2025-103099 Malicious code in genuine_herring-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d29369f456300a389ed83a5095cf4080e0949835123621b77fced63f079cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_aardvark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27717626e5822c826086fafb962fc94f48adf48b9e46fa936bff15925aa05b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_dingo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e634751fc99d26bf7294cac477dc3b25a526942f035daba305a24ddaaaae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_dragon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85dc0a27c18cf6ec3cfdd72c68321bf2e51f654f77beeb514e160faf55d56dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_chickadee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7a2d405304ea7a67ed3fd1c3c95ea7a8e1a9059e0c1db48aa8264d0e43f4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_toucan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9f9e04edefc55dcc7a6041bdac545b4adb4e9a1e210f1d2bf9b9ea5798e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iymbfz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b2f0d7c84f3f4897ac0b8dc81f8f47bf2e2b4fb9ea0eb64b81ce5d89e950e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_cardinal-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c4d3e2bb90fef0155aae63ef1c55fd4b92fa652b0cf280ec77a778a3e0c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100735 Malicious code in compact_rook-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d989229677f79a8e13079ab8345d0f7552831845fdd065378ddb6b0654e36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_tapir-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28c0a96daf59b213b11394f85047ebff0849536353b815fa9ddb35ec8150af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e50c82abdf38988aab6070d0f3140f1c344bb8504d91380c77b2403275e06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_crab-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a83d6fd058be7a831335c9a98b6a48bb46d0d444725dc25b93c426998d39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...