MAL-2025-105383 Malicious code in lucky_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e527af9369b8dab8ecf209b233439a605081976a23976f1953ef10ed31df2878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108618 Malicious code in sharp_warbler-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0bb2431c582b61a8dbd7a7a78d40fa7c2ea947fb4dc48802f2ad45429058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99689 Malicious code in awake_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de9e5d7797ca5c0d71d00c7c830c5390ca0d3e592dcb34e9a3c5e03476340a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105776 Malicious code in melodic_hummingbird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d92ea4cedf0df1638947550f4ea07d803b042ee9734223fb9cdb719248172cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_flyingfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d84e4c56cb507ec4f9ea0aa5e4c15ae5a3bf9139c7e249d2105fa2a0397681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105812 Malicious code in metropolitan_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1283cdbd7d2a7481c97f224736bf7f76fc632c812299a72aa7f0a491c4a39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ce33990b72d5eb35a1deb607a64ea6b9d6f96e644cb8ff186e5ce0b87dfde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108453 Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104350 Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111132 Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_coyote-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a536c7e119d2dcd2d8cde57c38e3d17e5deb54fb112f07c7e12d897558a7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lmxqih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bf63a6542938424c535cf424be087b8094c8c9f9dc92a98785a7b625a6e03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_cicada-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd270ea11e83955bf025f797c807c93d0c1a1cb43d0cccb72667642590b6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...