MAL-2025-102069 Malicious code in empirical_herring-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93822fc9e337542b2af4b6b95d3e65e7c1cccb4870d5d7c0fa5987fadb88f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in megrbz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c50e68545e93db6de7eba15af2d2b51ef4f93b1c746c85d13dadece3a2786ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_scorpion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faab7bdf46d8321e4cd8c4d1e0442bac60f77f4a3c50583cec968350ab7212b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_jaguar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b299131933774f78c31508b66d1561fb075cda0d16e80fbd2c62998e704a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_ferret-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131d6c39290f1e7a7231601ccb5582b0401eeaf4ad3434bf6d4254e9a3247e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_elk-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f698ee5c5cc56eddedc13a95d5a90bd8cdfe1812ca0c4d8bd0da7d3413c632f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_moth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fae02b697b8f1c200c61b505421ffaf49eb1fa3d4eacb33d4fb166aa7d379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105989 Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101889 Malicious code in eerie_takin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2842f1ece7e11a8b4426c9aa2bb38faaf4ef036ef33ab97a867079e58e8c368c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110357 Malicious code in various_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e77f9e928223b44c5067f697d0481933b6f66c0a2ba1122f4063cca842c1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111131 Malicious code in xlorva-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec511edf2480a0052587d3496ed7dc521d6c63de87f3c024bb5bf3eeddef7853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104016 Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102096 Malicious code in energetic_bee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a03c6da0b5d27fa8aa3432a13cff66d4925dae0aef4eae5d7eb3adf0839d277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110248 Malicious code in useful_panther_scarlet-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0badc64a5de875b1cdbde6782f0ec25c8f1406be47944ee263302d42c7ee074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0204ec25dbc7b5479dcca05198a6ac7c5ec47ead91fa75febad3ab5ff086f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fd0383fff36a5079a01b9b4ebca44f176059f0b282c9630438dbd4467a2f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108567 Malicious code in severe_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9c134b6768ebb5af34e335bcc49de697d1c553e5fba1e8869aaa249a8beab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...