MAL-2025-100767 Malicious code in complete_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574904246aff8db3b7e83fea561034122eef1f8755d39ea94b230e52e8748390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110633 Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_snail-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c96c1c42bc750139f331b39752f1359900d4dd6290f862298d8f2455454f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_giraffe-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb208816c694b0f8fcc5d06a83eb98d967f6580e9382609a440955432cac0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_dinosaur-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d016d07b154b87a517f1b85a71bf5208890ecbd40fad1b62536ec120135fda7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_tortoise-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7afc830d97b4223672736285f872e1ea1027549471d17fd9bbb251b0d1fdddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102825 Malicious code in fluffy_alligator-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ab75b8aca80dc049de8b27bd5c64c9e1ac092ba4e6e046b7a8dead2b362597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tzgxrf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dbb4c7839dccf1f5b3c2140857e7a5b4736ac902080a486db7763c7cd9b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_booby-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1440f2607031a1cd0f574cf9bf1c047c68fbcd093677d6dd327f7307ca65d2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact_scorpion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6df0f72dcbaf523b58355090a5402d48ec85ef663207e1b5c668c7dd0089fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rdkoia-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc95ebda21a8d61d48c22c419a3f11a753c280c70434d3df921b3eb34a2a4d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99704 Malicious code in aware_minnow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100968 Malicious code in conventional_parrotfish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dde6f33b52a73b4020f6f64d9154256b774219ef7897f9b165d22f0270a341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107007 Malicious code in pcxreu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663ffca70461376d4d89855a0159b8819978321fa67a3304ef4547d6da2e49f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102259 Malicious code in ethical_wasp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cc95c9722d0910a8f4e161f7226487bb8f8c433559c79538c101c5da59d4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_leopard_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7724513cafee88379a7163b0e165ff5ba8a172c9179c4097e65d70fe33e45e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109051 Malicious code in squealing_fowl_white-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a94d2cd8b8db3a66b55adea3f167abc0df75e1967a574bc3b0b40c05cb8a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110786 Malicious code in wee_jackal_chocolate-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214cc30cc2f8ac9e094ba6b2556ef6a617c7fee579fdd2f4ade865e56065efb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_chipmunk_scarlet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896dfda62e9b1382328e7708bec88a7642011809eed6d68d7951d4adde0ebde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...