MAL-2025-99056 Malicious code in abundant_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb532ee5e2c1140ff9cd120c2a8c8792c3af2c100fa17d15edd2d6678e9cd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110105 Malicious code in unfortunate_gecko-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d27af830187122e24f232102435c2ea8d33b29bf05b10175ae59d8946c7d194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103381 Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110564 Malicious code in violent_sparrow-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b04ef9f24ac87c3b05700075651e7c79b95fe9f3f76d05767339ae12b194de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109817 Malicious code in tremendous_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e70e8600badd9a8a4d089a3c339d744552d55ca826eef7c9900ee0046979fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101046 Malicious code in crafab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105070 Malicious code in lengthy_earwig-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861ebdea89bcbfcd1b30ed7e6d17b0cd253a98c15cb3f74222fb294a4fcc294c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102296 Malicious code in evolutionary_hookworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc587257f5a3e6508aef6b53d9dbfd5066ac11d8a193876ecb7cc0014a10a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100575 Malicious code in classic_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b07b4cbcbe1655f5c2871ce405e5a8baca90e1b7bc1768dc36699618240dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101819 Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104843 Malicious code in known_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33bda574cabd6566962896d78d04245efe03b66444c164ac5d71f61609511b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_mastodon_ivory-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9053bdbbf7f1a712cfaf7a1843caca6d1f44876cfedb23d63fc8af960dbdf521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_fly_pink-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87b504aae4901d091ec15b78afee35c262e3cf62d4a534dfdd5dd8aaa9662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_raven_lime-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0a9bb392035fd263cd218c236e3bde5aee3b8bbe6b5c3514e4eacd7712c324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_gerbil_pink-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ff98df135efa518d7ce3fef55c546d6dedce20bc79663fbac673148fe6cead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_planarian_turquoise-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76fc7988aa39aa28d4133d7fa841aa777bf55fed12b94a4fa53fcd75a4668120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109295 Malicious code in super_amphibian_silver-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2176b0cb2a4f47b4dc873def21ee7d28ec726f62bbc622847791e882455eba17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_crane_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891beb3953c8b2256a7d40a8a930d531ce03679c150fe13977c69b9def9d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_hippopotamus_lime-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb9135ff48c44e848cfbd1c08f9ae73039a4bec900197ec385948aecea67751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...