MAL-2025-100277 Malicious code in casual_antlion-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854c66d044a085214650d5016e27fb8f8fcb5f278faef65102653695f0ef9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103820 Malicious code in hraxisys-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3ffa1d448fe520d2bf7cea5b4ad772abaf8152ac844115f2a7e20b235fc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107427 Malicious code in puny_planarian-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94badb17a5f44ea245f11720ca9e8e1440dc5200a269a7f9be06121bebb56474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_tick-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a98cd408e078c4418c0ecfb162376699449bc504d22ea143d9881856d90c252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foolish_halibut-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efa28fa5e0db7da65873a5ee3ae334ae491da9c8686048f1413ba075c09300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agttrn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25517e2db6c7d9bfdb73c51f57e0c25c6f3a997db815492dacf1320f6b9fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ee3e1dd0779e50f9dd1d4c906108b8e202636e41addfeb96f5523eb2fae4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xxtmzl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596fec4920ed4699df8f0540087a702fbb43649de3a496e38a829be07c4a5980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_eagle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84f094a7533deffaa09c07ae1fa7ca272a8751aadc5ce9fc02af3b6fb47bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485773f74deaf4f26543fac3d4d435274914f78bd579e19b416723fab9e89034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_boa-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbafc89e67f1da2bb86c02b6f0dd51156891a0c47fa9ef47bef1eb34da5c38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bd4f38dad914b72c509a8d57d247a9037fd94a36789ccdb4732c4518977c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halibut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947a0e7b4117084bbbe08652184ecfa3c7e1236e539d709fb3ec51f06b2f9d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_elephant-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a907b0c7625f836c6c9a230f0c7790c9d4c44c81acb4e3b6aeb443bafb6c7401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_crocodile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916a88750412b67d0c291a46c1afe113e5a0dc6ab9c177fddf4f0648ad5f4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104361 Malicious code in international_swordtail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d9517607696f8107a2e5ab8f664f7a0aeda60aa4e7466d5596d92c5cbf72c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105625 Malicious code in married_impala_sapphire-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d222a27b321232cad8be5cd64f6e0935291fcea29e049d2b3e858f29ee3960a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101082 Malicious code in critical_jay_crimson-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15664ce21b62cc46be3aac8a1e311d7f2b3d6a1c7f8dd95794ade951f9bc3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_crocodile_brown-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a04cace4c91a54bf497d2213b4422c4d78ea7cd3f34e91c6f6a953c03140668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110810 Malicious code in well_mosquito_blush-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ae7e7cde55e953eaa0772427b096c24fe582a1af4ba4b543c23640a40725e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...