MAL-2025-105780 Malicious code in melon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd49e9ab8796d92d6172e694d5041a4faf4a60f90470d0196993fe518a8787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1412180a6f0ab7d189ec04d5360f41620d1c0251896f2d1a1f4e0232aa50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308206b02604ad9105c180e88e091e8b1d97349e3dd59ba570595ff6e28a095c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb7e2c7bf43fbe86831ca1e5e5fe1f52bdd5059ad9dad04d562a544f08d97aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_slug-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d771c67e37350ee332fce7243efd0edaf5ba5c8b25d70f102f0dc38f9e31ccbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_ox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a452ac2bc83569378a7b2299e843f8ffd738ccb9e2117a6bcba2bf60663c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_echidna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac83881e6e2cecf2c0fff680d00aa02e5c9534c628c583313fcb726a994132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_eagle-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995c71084c23e2a26e695c8460ea4ea2194a2603edc60e4a6e363961d7e72d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent_duck-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d5ebcd79e0f4456ba0c4f0a31e7ece36dda021043c54fb77e7ac87b181c3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_tiglon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dea42e5cb70a8fff8955cde686f5d26943f6a8a7235f3241e2218a43f90f2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved_lungfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ac4836b19aa400e1528e045cd3b06f48c837b83f1f22507cd4addd86e7c92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677a12b29e83e16c7ce5b50c57718724a527f88369c308233750d39503e2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_manatee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376985a9b75e8f9d90499f13a239df23e616b57fb0eda43812e83fb114a8fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pannnini-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5987626875800bedd975e2c57b8da4f867eeefe7416b137651718fab19d93190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111035 Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105987 Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107716 Malicious code in rare_mandrill-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8039af2e9b9aec798f34827d43e9d5d65533c7f459f19f9707324904c94c166a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...