MAL-2025-101249 Malicious code in decisive_hare-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa5a07e63396805f3bf7c13174c7bf158c959cf0c543197a029538ef45f4a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108103 Malicious code in right_hedgehog-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c825227f1f140b5f6fc9fd94f5784fc8a9bab7529108abe869fb5121fcf5e729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ukxoku-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17936df2dffc0696ba62849e12678c2e19edc03298446ce97e1e2c544183cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_earthworm-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c83cbbf286d8cb6cb478ffe632b4b8803166e5827814c637ec3d192afaed36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iorgvd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b49f798f318a3dd7b819127da463a29512d31cc4eaa93b4024dbaa8c08f79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_horse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1763a848490315da304937a810a7e4ea45d2a6a55132df4efc627e2b6e60b98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_dingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3e6140c7c27e9579ae94f6885f803808467ff92e6550d8442465d1dadbc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_yak-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce0044709f5cb58192e95a0f712561ce132e3af60b00e1eea349565b1fc0277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_wren-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf30509f7d739aec22c7bca5bc62d5573b2b81b394a634755186f49c6dd4845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ouyrjh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6c5d5ff7fb8c384df3dc217b566e50885f006c4c363ad8296d207839896cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1b909c93d7a72de1b29d596d55808b17eb20f6d5a8fbbbe0a6a9e8d2de300d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_goat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5977da70f3b679821c6bc4e570e6eabaa2533693024960393f29e72ddda4100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hraxisys-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3ffa1d448fe520d2bf7cea5b4ad772abaf8152ac844115f2a7e20b235fc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in szjsew-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc7c4e8c4da31ffb4cd3984d36fc31366ec91d5ec45803280a9f9129d8e100c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7664c02e1828ee4496983ebd302faeb116ed4abe7092cd33e0b350e7df7f6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107729 Malicious code in rational_silkworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3101186fe93eb0058c55e50ba8af0a951b0d282eccc20df904d2a840b7108c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103336 Malicious code in gradual_lynx-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753abcecd6349bdf18e49bedd6484d66005f1758372d15c30d40b654a9b4dee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101106 Malicious code in crude_antelope-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd384d679f0901c9dc23c09c7285fb2e1ab4fc1234c3c22c56aac4125ded6ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106256 Malicious code in neighbouring_piranha-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909bf177fefab1801b31f905f89cb87fe0901ceb9aa737f1edbc4c0c950dc419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...