MAL-2025-107063 Malicious code in pgaool-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ffe74b96d7a953a11c9c62b0d308901f3dadcb95db427f9c068101abfbc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101026 Malicious code in costly_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ea8f63b13670df5164b84e3f837015a9e3d917700d37a9afa9cfbb6a506e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105900 Malicious code in misty_basilisk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de23709fbfad926d88c22f5e79cbbc7c933f48262991ca271a719dc83bdf1237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110180 Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_capybara-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c39d29e9842b4ece8d44f8d313f52fa48b3da99952e82f13a59dfe1a9e299e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcea628ea409e46815eb4ff96e7ca73104b1d8759b21d8b59eb5b72b88c13f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c26ab0b03afbbc6910b4ffe63a7cecb3879a7c1c71fb534245fa399f169e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99691 Malicious code in awake_cicada-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7cdd83d5bdcf366ad51c207ffe4e563c8363250c98f8319c3860c41e0a1354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_ostrich_amber-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea47015799e97aac924e70fc902efd3225bd804384cd4a421a142fa202ee818c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_kangaroo_blush-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927cca983d456f2c432a737f07b5ade3493f39d51f6ae7671006e84480663f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_canid_aqua-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4253a6a1f87ab69701baeef64f200670501c784d87f3150e4bdc48c486ff6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_constrictor_scarlet-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831cd98c7940951c3a4d29948007bcf805932b690da02565a625dacbd1ec673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_elk_maroon-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9753caebcf493d2601461ff4d592659d7d94e2985362d472cfe7d301a1293f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102090 Malicious code in endless_kite_moccasin-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9335ccaab99bd5a2aeb3b80d4498c6511ff25ae0ffbaf971c9b3cb7b2965916c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106396 Malicious code in notable_tapir_salmon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ed0c3df4002e1b1b3322c37c4afec17f763fc33f054766722fb917ad3d5374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_mink_crimson-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514f1988c54af6f01537c2e6ce03a09d805f0802b1ac4175640720bdc78286e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...