MAL-2025-105677 Malicious code in maximum_roadrunner-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b061baac98079f49d88d37e36e474382503acdda97bcdd425eab994134ad42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_tick-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a78cddaf9a193d4581d8ae4f94ab148563c482e6d9f247a7c0143cd41b3647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102916 Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105064 Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108948 Malicious code in southern_catshark-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6e1efec17b1222ba2309deadef91f9321c42563237956ee90fb248547c561c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101389 Malicious code in developed_tern-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06650f71b5c474ee8723a732025cb0dd8c5c9a54b89105eed7b347ed1f86c7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107256 Malicious code in prickly_whippet-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd90f250a331a33ba5dff7ecde2167dcb27a6b933ca8470c3548a7b4601e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109893 Malicious code in twctwm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7b9bd8198a3e7f139aefd28f4406ddae364bf91865810bf045abbbb154d60d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107404 Malicious code in psychiatric_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b49fa6893ec55dce7cd936d224cf65d5c01df3870bb5563ef068c5a6dc6b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104543 Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103711 Malicious code in hidden_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc28685cd763c2b89cd617f71949bcf9d6100697ec78ba07e7e36cebb580726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...