MAL-2025-101791 Malicious code in dry_weasel-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6879b2aab1e3b7ab3f3679d9bc33d9a149a8e453e5c26f159efb10122d5d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109047 Malicious code in sqpoox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5110203a5b460379d0526877be33a4e55ec12b790b6d0b14f3c37e30063cc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106926 Malicious code in pasdgta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1b02111b1f46b7f86a55f4aae73a04991b17358bc878ab075367171e8e8760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104547 Malicious code in jhelara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdf3ac133dfd5b3b9c3922ce1bf658bfe6d472aedeef343ff13ed76e9006e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1938179e797e8e370cb64250e2c93b60d7d739028db060d45c273b6f45c5960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jdghrd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7aedd19f7c5a25a83995947f99625007e6a104623b4e65ff026bb3ac9dabad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0c061b3177757ec9bd7b0f50a90724761c02c59a457570ebfa8e23e41d1cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_chimpanzee-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a83d072b8b0f929e30a36d5dbd0dbee42c2635c001ad9f9117947f96501d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2bd79c83056c305748de73f9c7b04714d8f558de9d7df2295caa3060e5d790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110586 Malicious code in visual_roadrunner-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac36039bab10a20bfa6e8d497dbdb0d1be0120e7d8b61e4ffc9291b01f0d6e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108241 Malicious code in rude_sparrow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cc7c45ba79d93096823b88d7f6966f3fae120e5b27e9f9a8f81a7940c6a83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108662 Malicious code in sick_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214ccddee4d1e337e7992da2ed0fa4c6038060ca84400d65b321e083b9f55992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_rodent-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e6a56938ee3d763caa3e8da306ef0cdb28786bee38de07e06f0eac66995c0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102273 Malicious code in evana-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1fd4368fc4c78eded8f350ef2daadbfd31ec3b0a97a2eed4ce05ba19098ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108914 Malicious code in solid_otter-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7d84c5dab6581b2e2c01d219d561573286fd4521550de14977bc72cf6610f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104961 Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105054 Malicious code in legal_horse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1763a848490315da304937a810a7e4ea45d2a6a55132df4efc627e2b6e60b98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106774 Malicious code in ordinary_lemming-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eae1c2c04f0ae9b11307e115a73942b919ae5b889e5106e122f4d27dc03b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...