MAL-2025-111132 Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_cicada-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd270ea11e83955bf025f797c807c93d0c1a1cb43d0cccb72667642590b6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_lobster-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c1bafa73faa8475bfcad96a2cee1729fced898e3248e75af69990aa9fb0235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108453 Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ce33990b72d5eb35a1deb607a64ea6b9d6f96e644cb8ff186e5ce0b87dfde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_bison_cyan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc33a86662bcabadcab7c50e1ebf4ce0cc9f94147d4c92a331d3282a26d765e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106062 Malicious code in mutual_silverfish_scarlet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8603ff57675a38e27296a7d2e5e77aab7ac78d768a4635aa77cbd7f50ec59a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103958 Malicious code in imaginative_elk_maroon-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9753caebcf493d2601461ff4d592659d7d94e2985362d472cfe7d301a1293f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_jaguar_moccasin-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2149319b02766d0961c72c0628211fb13e1b0a265de210b5bddabd5d1d5d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b379601d1ca45aad3e2ecd2ba2c343366595282f06fb07b89713c8c107447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107109 Malicious code in pleasant_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690f8177829d1da06bf49b69776a23e4093d6182c3de0d8513a73c373e289734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99086 Malicious code in accurate_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e295043759287838b8a72826e7c58765946dff37e843c6b7f08f5bbee9d59f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109804 Malicious code in traditional_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11296617bfa112029733ba2fa7c5c47df4446c819189e1e0c05bfd300b0818ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf9d39770379de148c7a8a9ca1077a9a2a3977364779d0fc920a3b5ca951584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...