MAL-2025-101685 Malicious code in divine_wildcat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b895e58fc060617a939f55136614d8d71e10d84c0205b2868c0fb7493acae14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107922 Malicious code in repulsive_squirrel-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123b4e9b337819501a91c5328159edb53a3ae8381e606b1707fc327da046c35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109859 Malicious code in tsnzau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598ea3d8a0fc322c381ac7c91bf408d40e652ae4d8ba7470e752635d883dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101362 Malicious code in desirable_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4073a06b814096374ce5f694dea3be10cc46905192124e04fc00da8f0a0550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088b5511607ad62edcd65aba76c05b48265b76223b5c87cdaac144d5f063e096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106560 Malicious code in official_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a03759ef705ec014453a10ed44be215fe366ae87585e1a29f3afe2981f2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103108 Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106931 Malicious code in passing_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaed4886f0265b162c26d5783281bd2a7925441654c944292991ee87087de7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110764 Malicious code in weak_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb7e2c7bf43fbe86831ca1e5e5fe1f52bdd5059ad9dad04d562a544f08d97aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102974 Malicious code in functional_magpie-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567866384fa1077c81019c40982e3069803d98eddcb4d910dacb5944ada59995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d23833f480b4777fea6e5d7cf141a3f392fe33e7d0c2e02a0fc06df1eb843e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_ptarmigan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1210982b13b5f0126b62b7c2182866478670c3311ed7245e055af639373dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616fe1b68ac5bfc4e12c763622cf9b3cf7126c1055e2e53ef928c9cc7f5d3ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_rooster-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef540ee32240cb0f60d5bba4db47d8781a39c543ac68cc2e4a6f46647a81889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_bobcat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab14fe86f4a7a29b08eaa680d4bd0d75691cb95ee1db6f042384135f46496d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...