MAL-2025-106301 Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109241 Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108347 Malicious code in sardine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6e9441ce121d319a0b68d12cb8b8631b5395baded630ff03dacbfe6afc7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107836 Malicious code in related_dormouse-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be2ff63357bce1d77577ca538b99e651b47e3ea33adbb1b10528f3f9f0f80e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107054 Malicious code in petite_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee99b9a8593247d7d8f7cd4ed2c7032ee14599262d76ca5c8af4301fc9e5c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108648 Malicious code in shugll-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e6f12b28bfaf9eafaa83e32c895b362bfe8e6828485eff37b2928b2dbfb790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_frog_magenta-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7bbe7197b7ae454a4f8d2f7c865caa9d918f9e8b70ee1d7be2238835f44f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110332 Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101692 Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_camel_tomato-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b4c9b3f2c1a234ae5f7c1c0825cc6bcf1017f110b3e8e80d8742821a1564bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_louse_blue-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c031450ce82cbb47514fd3604ddecc59f90a389f473468561be4f53c8463ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_felidae_orange-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bf4912daff75be009d406e7b5244fe4982a37935978f77bc19640e850c812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_junglefowl_amaranth-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c3633cda3984970e983377123dfeeaae1d510d9b9589a6dbce2f217735e21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_catshark_black-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0cc64c2fb374f41f266e299e1de998f0f2a3594fe123b002e977e39906769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110563 Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107202 Malicious code in pregnant_mink_crimson-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514f1988c54af6f01537c2e6ce03a09d805f0802b1ac4175640720bdc78286e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_sailfish_plum-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3162b7e997616d5075209bee5c8b20c0ee6b4b3ecb67807f2f3fb20b59a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...