MAL-2025-101325 Malicious code in delightful_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b48ab3ea3169a7dde866b23c52c5acb8357bd1d5543d831f871d22b87add315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108853 Malicious code in small_moth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710b1e1def2699e82ee78ff4898c652eeb96636b978d869ae480e478bb9c7e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107183 Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109041 Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108436 Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110629 Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107815 Malicious code in regional_wallaby-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6f35d66bca5f2751ef04736a0c3f5aeafbdadd4564e51adc68b9ae8dff1bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105624 Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110899 Malicious code in wicked_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fd2f933a0586b933a5aefeeabc45ecbe554e32c3f39632632ca62d7016c3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104899 Malicious code in kspapd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde9b363af18918ab6c3122fd4178daf06e9302a6ebb7c658cad0e214f50595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_seahorse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3198a1b8013590d9df4d76ff549ff203fb595a4065a72ba52ee8a04c56fa14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2fa24af69cd434a277b2034a7206f6bb0eccfebff149bb9cf8c628fdb7133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_aphid-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c16d5f957b144873b96089ccecb0eb20c9a5fa33c348e6825e5d7fcf10493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ab83ed5ed2d485d9bae44d0a9462b0a5d59e546dc092f0177cb5bfe3fbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0f846cc154c0d44efa0aba27fb2f40d0fe0f4716541631750f518cc4485ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_wildcat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55797fbc4e74499f6d13a2a3afae7739d129cc1a08b2178b71321cf50c43acfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...