MAL-2025-108891 Malicious code in social_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf692dfb1b6c534ab3b39ebe4ae5a58b5f1867dd98ee9453507931b099f21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_lion-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b6c70e814f88ebb124b15663b9abfd718aa33c770cfabc2ca4ec5263696fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8c52ac1465aaf930b7996fba5b8ff8eecb88864ef39ad704f74fffec3f04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_bear-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fbea7dcb8087a54d89f3a23143447e3b2a176d772def5fc9abe48d0d70e620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105146 Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102960 Malicious code in full_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cf6a85d09f4faba00f460add459a15f069c81b844650536e9ef2ae9ca97b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106732 Malicious code in only_kangaroo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17724f3a9399641dca22d3234045ed1f7aba815b244c0f9aa9677a06318f900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109572 Malicious code in testy_salamander-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935b2c46e8c183205a2ec07054ce8ec6ac6f452d01e90784b55977c9d406a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110638 Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99279 Malicious code in agttrn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25517e2db6c7d9bfdb73c51f57e0c25c6f3a997db815492dacf1320f6b9fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109169 Malicious code in straightforward_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489fe7ba59a03e75d4703c48c1070a760a5abe150be94e44b78e07bed0137ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jczmew-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c40fdd38c5185b00c7a61c02ed38c29036353cad2d286984f0c7d46fb65f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ujjfzs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f818ae4f5720e4181a41d302d556dac4bfa23f1ba57d454f84704273038b5fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19f8545e199b4bbf351320a5bf4241a8a3958a5dd4300533c939788a8eac7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fa36d23003d827413eecd4bc8e7ed02ad514d89c8526bd96e447eb5e38a399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...