MAL-2025-107866 Malicious code in religious_gull-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b53c3d712c97925dd3391b4103b63a9d4ead23749db5094baea1400ecb9ffc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gprrxf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0d293b6780843647b401913487ae8a4521db4b7e6db85779d35281727e2db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quesadilla-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d39af5e5e9d294116e3f95aaf88e1815597da8f0b80d5834e479278398dc86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tvywfe-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce351a288cb856e46d8a49f16f4f4a094d4a8043af7e16f1f7313ba116a782b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105821 Malicious code in mid_tiger-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da580732aa35bc18999440524d466d68cdbc3370be95b3ee3713e2ceef9b1b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102947 Malicious code in front_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e77e39ce3d8c1463157fa35e54a60270f7279efd4bec08c740485f2ef11df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105787 Malicious code in melted_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d863cfaebf6c845932763ba2d1d77df7db0a0b203cad1de277858409b1d57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103328 Malicious code in graceful_slug-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d771c67e37350ee332fce7243efd0edaf5ba5c8b25d70f102f0dc38f9e31ccbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111304 Malicious code in yinpeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee78fe30f2ea84bb61ce3fcf8451777df0ac033cc124421cbbc2f4b3295b7866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103306 Malicious code in gorgeous_beaver-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_platypus-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634a6785c31127c1aaeb5a75c97bc8b65ba3f2fda21c28de89e61c586fc21ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_skunk-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc308a95bd49bee455a5f3977b927234eeb7c6e85465a1c8590ce246b83e6047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd49e9ab8796d92d6172e694d5041a4faf4a60f90470d0196993fe518a8787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_sawfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4d728b18cbbe0941690a275030ab36d38ea6bcf9baec9d4405f5d56de3e81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...