MAL-2025-104375 Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77323ed4470caad02967b2f2e80e40f52fc9ad89926f77d96a6847a3bcaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_guan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18643953443d5ac78f142ef180904ad8580b8c28b4a772f599b5d369f21fd12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf4bf65a7609df7de6ee186b478fe7c1ac2291fc92c3b889b6ccf78597f1d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super_aardwolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f1282fc8f7e87ec550f799c53c62d00fb4c8d9ea1812f15a1e8600a4f44f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_constrictor-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0759eda3d53de9026ed52ac034059688f07d298726334e65cdd26f570f188a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tjfbkd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da247256e8f6c3e541de8b1ad021adc8341da954d739e61336be0504b8330e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yzsnvz-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80bf41038f5d7a81a86892fc586db4dfb74ce4f08f79e56485e2a2a8b94dcfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_bonobo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e3c113f17c08c25842df74acb8099799628d14758a94a60208a8b2f0c44ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_amphibian-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f030524411d6de527c60eab8da3cbde446d16248b5a0deef41303ee17743d1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103060 Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108910 Malicious code in sole_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55863dfea90092a3b2fbd6f7ab75659c72f98da7d805d5c06a86045933532ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101294 Malicious code in deliberate_junglefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d5e107ca24590fb067349f6b178cb6b126f4c2664cd433fdc1dc509b59b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109720 Malicious code in tkticb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb32c2e579249499eecdb9bfb582646a4718902f49e46fc96e94e122c8cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_fly_pink-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87b504aae4901d091ec15b78afee35c262e3cf62d4a534dfdd5dd8aaa9662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451cc43fa3262ccd87a5fc0ec33def2aafce9839f153f334e00cae73d7f83858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccd0a6db76809315d72315c4e1fd189dc7562426d9a5bc1e7d44c800265f513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ef9f6032db227f472b02f0c872b9ff32dcd4b7c100344e13c3e7c0d3d5e746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109717 Malicious code in tired_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafd4c2a483d81d67c7c721559c00ba3ec87d286c8e05ce18b2dce57f501b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...