MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103359 Malicious code in grdxww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12954d422fc2082858d5e0b104710ebb72604cea8048dac6de690a303bdd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102404 Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104087 Malicious code in incredible_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7a3636229571c428e2877e0c9bbce95d0fbc7cc7751cd817f7a8d0770015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109318 Malicious code in supporting_crab-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09daa3ced0b34997cf25c4a9146f0d16bda4ff244afa3b71d2087769a4dc742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102334 Malicious code in excited_earthworm-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c83cbbf286d8cb6cb478ffe632b4b8803166e5827814c637ec3d192afaed36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105110 Malicious code in liable_ladybug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8c643afe39a6b39ccb891bdbaff93ad876847ba2c66ae0304ae57624431e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hedgehog_pink-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd46d9fd3f16db366a2ec4b658da3daf038d714dcdc7b9660d12a77f59c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108597 Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107155 Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106396 Malicious code in notable_tapir_salmon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ed0c3df4002e1b1b3322c37c4afec17f763fc33f054766722fb917ad3d5374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_macaw_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adf8e44d1d908c677965e9343b90daa9b4f30fde8cf27733508b788facb1ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_fowl_white-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a94d2cd8b8db3a66b55adea3f167abc0df75e1967a574bc3b0b40c05cb8a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...