MAL-2025-107866 Malicious code in religious_gull-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b53c3d712c97925dd3391b4103b63a9d4ead23749db5094baea1400ecb9ffc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107651 Malicious code in quickest_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc5acf7c0553eec4d55e7c2bbae6b2d17652fca986cdde6660c79335939b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106067 Malicious code in mwjaul-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3219d3156f80e9acfd1a96d3d0a1a38296ba78eed8c22ea261af3f4ed535a2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okusyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b99188657464f72e581fbead2da3d7aa6101f6b1966589a4857552b710f632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pepper-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67390ed17370147fb5e8e42188b0c422634d8f6b2fe1cfd0d59e6cbe02099fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_wren-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0d8f0c7bf2a1ce85a0818f7338f5a3e33870f54338e01190196b52e4916671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naasfdn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f5358b2055c697da27c1d8f39afa8c97d8fc4d52316b33c36489884a7ae912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scallop-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8386940850fdeafa9e69bd386e5a2cf1b2dc851a2d15f27a7948de3cab55e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de65ef5a92b0fb3c8f2e27b24303acddd44e8e0c2d032783a0f24ef3254b91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107421 Malicious code in puny_crow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c525cd2207a5f9518476597cdea10aa81af9031d5f75c417dfd45d9bc254d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101052 Malicious code in cream-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8035936afbcee4f39dd33c01b3880b50d582916ac0c5eda3fbb2468e4d3384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107087 Malicious code in plain_leech-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e2a144ecbeff4e4bbb5f49a096192373b766b123b9288e0ee29785f2f1f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102030 Malicious code in electronic_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a17112d38f8dc35531abe86745ddc71e15592c9399a2b047f2c0f253b76268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101043 Malicious code in courageous_spider-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359563804603c1aa4a59806fa21a454c7d1a6753c3213382cf99e3bbad31e036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106472 Malicious code in nzvncj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569099561ee9c5493f69f4cd0defbb402ad2269bb0924fe593714b3d3066f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103293 Malicious code in gnocchi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c643ec953a6d4f794a1a3742bb4e35d441aab63ac80d278102e5807072b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106220 Malicious code in near_panda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af74677ec235aad8ecd37e658fe81e2bf6532ed6f0e24ddb663473a75db3057d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100263 Malicious code in carbonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ec0654a6c42e716ae44f1a73490a5a459527bb677799604b538e35dc6a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110211 Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...