MAL-2025-99983 Malicious code in biological_krill-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8647bae590e72ce8d9ea934ca18233311e41cdb02e45de85a703f7fc68ba9a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101846 Malicious code in eager_raccoon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bbd67dca8032b1e3bce5ce8e59b4b51a6c3c4a20b4814eeb2feb611530a901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111256 Malicious code in yawning_scallop-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515b9b4fb4157af0b8c5c32bfc9e7ef2f08a8aef134d18528b5f3c9cf3147137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99056 Malicious code in abundant_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb532ee5e2c1140ff9cd120c2a8c8792c3af2c100fa17d15edd2d6678e9cd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103865 Malicious code in husky_bobcat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e920ffd49c7f3d59fc9ce0d8935b5eb3b4c8eb1c5ca1f876a2e8dbec0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99701 Malicious code in aware_donkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c27af153772bb84f749e05af5a75e25ccc5e3c8b296046a0a3c843394a16060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104334 Malicious code in interim_kingfisher-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d7130bc05163c7018e6ebfef577ec308664b8c5eb2f571390d0e6bbb4f0f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102246 Malicious code in established_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2034495a678ba0533c6594f0dc21432724f8b6f74660c391e6a027a4d37e106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_kingfisher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65ab669eb0a6b8bd3f4b9f1b41e39da4535d4c5d80cf44a66db0f1203dfc863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110564 Malicious code in violent_sparrow-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b04ef9f24ac87c3b05700075651e7c79b95fe9f3f76d05767339ae12b194de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ae3bfb974e86953cc8fc7a335a3e75202d27bf2d1e61988022909888d227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fb59a27eca40d45301ef4e1bd1e1e5caff73dc5a6845dc78f86b91604d95cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f50f811b8f7e3bb23420b46543f21ce8b8689f190fa2d0ced4a148195a445b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrubhk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3f2df7bcbd982306598a5834256a81b235210d3eb861943e58c792c64b870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106066 Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108822 Malicious code in slimy_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042ce403a60c619285cbc45c629e247af3cd5f703e9d47c8686906e76c2a898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100257 Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102296 Malicious code in evolutionary_hookworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc587257f5a3e6508aef6b53d9dbfd5066ac11d8a193876ecb7cc0014a10a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_tick-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118eb3d875c62514090957d436712e68b70da85ef529c7600065a0533e5bdb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e630578f4e1af20cb3c440919032e8bb52b2e3d21f3452722b25c346f5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...