MAL-2025-108921 Malicious code in sophisticated_perch-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c314a52f4c870e9f9dc610a69ed717191eea0348032af7ab22f348952d8bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99603 Malicious code in armed_mackerel-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffd8dc4ba9285b401aadca7bacfafcfd3f64b90fb0d0ba818b76ea648548d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104251 Malicious code in instant_silkworm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fe235b59a10dff6ebbdaf5e82f40af89558e80ad386d1b0715be4a457cabec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108446 Malicious code in seblakkuah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849cc79ca4b54a15080b225a6bcc00af5f3fbffbea9930d8153b4b4b29d42bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_earwig-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8ae798df01b122510998abf0bce4e723537ae75e7a18cc35318c21d67826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_flea-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c176d86e179a5fef97158c6f7b2a4d1de3c88b500609b2697d8247bdc978e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_lark-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7f3f9e76da84927154360afb41f50f932da012db576b8ef3e51bae3307c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849cc79ca4b54a15080b225a6bcc00af5f3fbffbea9930d8153b4b4b29d42bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous_angelfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727742c8575f29d6aad87bbdae0ee6e0992c71d3e1f12d865a5e08a3f73aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_albatross-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf670c1bc994dd33c79c69fc45982348835d436356a344fb8aaef9b79b8a901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fb59a27eca40d45301ef4e1bd1e1e5caff73dc5a6845dc78f86b91604d95cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_tahr-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee7a6c08f2aeafdf600de0710269f2c80e3c2b19e77c82432d865902bf3bc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f50f811b8f7e3bb23420b46543f21ce8b8689f190fa2d0ced4a148195a445b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_skunk-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc308a95bd49bee455a5f3977b927234eeb7c6e85465a1c8590ce246b83e6047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bekicot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c985c2bbf85e98688728b3f962a061709cf7e4f9e718019ff231d1528ce3f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_amphibian-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f030524411d6de527c60eab8da3cbde446d16248b5a0deef41303ee17743d1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frittata-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bc6ad4b178e31b952b2af72d550477373129fed670239cc5fb324640961059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_rattlesnake-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bd17e2ede37e2ee499a5d6e89f93b0c6efe2e22e16a6c4edb808432f0956ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...