MAL-2025-106298 Malicious code in nice_dragon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975fc8d15f2ec8df961152a333181ef311c04d834b2cd3f72f7f210a516dbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102894 Malicious code in fragile_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1286dd1a29fdf2886f7d658a5787d4a40da5250745539f7fd9b4a19e52528cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99985 Malicious code in biological_xerinae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a838841b1f6e2f1202ec26084b7df541dc97f3484e835f16aa3f66f6c61c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108906 Malicious code in sole_albatross-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf670c1bc994dd33c79c69fc45982348835d436356a344fb8aaef9b79b8a901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110592 Malicious code in vitreous_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1248371612737a6030dd8598d54ecd517280a4436bfeac567be34b5380eb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_swordtail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca3672ed14c86ac7394285297a6f72ca3e8bbd7d556c9c11e61df735cc4d0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74439d0c75777d75986c1de86e4eb112608db2663b78963a219701e9a283079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4a2ba0e12efd96824829735cd7b22c6020d6d01623c8254ef917d03e2f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbff9dc293fad033029b824d051a757a29917e6d995099caa6719f4fe406587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_duck-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6465477f35f612b58324fc071bac1a512f9a7ca343762142fb02b654f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de25f04d64388f6ca33c3315899d11e808061c0aa8af4c9e89c6e9206770148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aab026914d3ca197611db8483456ebb0b8e3857c677442db9fdefe17cc16bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4def0a84e5b11f51ba579ff844b1f100a1464c3720e82c59a398e93d4d5e517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_parakeet-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00966432d79d8d3224146fb2a2524e5457949626c5049edbbb5defe58b9def40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3644e4af5c15c4cf6af55b4f2665d6efb0a905c057983a255ecac3eae14bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in txdejf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081ee7606d72c184766d79da2c2d45bfd14ea4e21ea513b8e52a3595d821adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in snmtyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173ba54505a8f48a2a0b6f008e9ccf09bf0f6103880276e07b9d30cdcaa7607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...