MAL-2025-100257 Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_cicada-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f833a79de5ebbb6473ad88b56c72572591767295cbf8dac539db038372fc8657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_viper-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b645b0ae4b4bad34433e75daee27e89b7f99536901b774cbf49ae5ffc5462ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_monkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e1dec8d809454b725acaefa12939f802e50f1014d4cb48e952572e8259cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e630578f4e1af20cb3c440919032e8bb52b2e3d21f3452722b25c346f5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_gazelle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2b5693bd0d88b8e3821da989e2b655db6f9a22d82788a4ea120ad8c6149993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_fowl-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f75a58602e5dcecc19ade4a85caf254709939601a227014bd4c034317f8727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_sloth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abbed89ecd3b20eb1115acc58bce0ec3353226f1d0d9f3f8acae7ebc93715f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_dove-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e260738f2f6d7c191ae985fbea30d313f8cb45330f0bc521ec475c9623cbb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vhtjsi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177ac75a305c267ab178e74cad1edc11638795f09e6631580a3ddd394738a4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_snipe-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df43668df009ba4eb078cd253e4ec5eefd27e8449b9f347c8e4eb39caf9bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_ocelot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79da4daf4a41158682e18f58e67e9e83f656693db3051cf4284f42f8bbce62ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108984 Malicious code in special_mammal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6d25d5e3a458b3896b66b0b70b98273077f7b310666b3c3cd6a6cc1dd853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105876 Malicious code in mirabalar-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1291cedd60554c08605e9bca0e88de6e1c6221d8082f477a65dc15f4ef4dedd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101846 Malicious code in eager_raccoon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bbd67dca8032b1e3bce5ce8e59b4b51a6c3c4a20b4814eeb2feb611530a901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108822 Malicious code in slimy_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042ce403a60c619285cbc45c629e247af3cd5f703e9d47c8686906e76c2a898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100911 Malicious code in contemporary_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f866c76961d18292976b0b02b41145639a1a078e591fd813a68a8ed6c3d7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107682 Malicious code in qylkkc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebab4df0c96b832a8032cb5cd2738ee66f597aeab73158acf440c28f43b2ce9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106038 Malicious code in mushy_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2fa24af69cd434a277b2034a7206f6bb0eccfebff149bb9cf8c628fdb7133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110044 Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...