MAL-2025-110834 Malicious code in whitebread-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ace2534dbf5a1dcd8fea48bc68ba74195c3c3f0c344727f8ff6b1ce92e88172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100807 Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffcf9c5ea97e878588eb71dcaaa50729af45e191254b55fc50831664302f8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oeaaws-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd18844600be94e8ccc6c8f75726c5bb142595b1b5ab90c3250b00985b6db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_bug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59624d7b06479984b50d5ef39d89ffbcdfedc9aaab1f4865b3a7a28fb7e669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93cf57433e730b32691fe1475d712837a2e1bc47f2678cae8b3fe654c7e4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zxozza-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ad14fab8347c3100ffada516ac970e3ff45c6234d5aa16215ee713934ffb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_swift-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d78d0f2668d292ed62d287c43b41e163b59c56e12c577b3d6b34588e19d32f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ukxoku-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17936df2dffc0696ba62849e12678c2e19edc03298446ce97e1e2c544183cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_silverfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93a672045fca0b1b5dc3e340f4a19698940f56cb3cc1baf385909be1aa7339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_cicada-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318f3382affa6320ae638b9292d21276b396ca313626751d5f4e26c03472df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d074b4bd00485737ce35206867051ac1d61682b4e5ce9c468f08d4023d31c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...