MAL-2025-104898 Malicious code in krsduh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab36e60867e7c5a14b9422174b5c4354feedd74727fb4be90e60a98ebf55fe53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103868 Malicious code in husky_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2654ef8ea981e61d2623fd49edf5eb7c296aa815e6c61b60f84b62f57f7cca23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105739 Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102143 Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_stingray-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fa7aaf6587fea87e3d1e8e86cf6b5871db91e150685a8036134a882ee69ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0ed20591016b7151f39bae20cffe4ff84d5cd95d8328c79d4cfb3ff5ecd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_tiger-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da580732aa35bc18999440524d466d68cdbc3370be95b3ee3713e2ceef9b1b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_rook-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d989229677f79a8e13079ab8345d0f7552831845fdd065378ddb6b0654e36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_ladybug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8c643afe39a6b39ccb891bdbaff93ad876847ba2c66ae0304ae57624431e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_ape-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359edad6107968037277cbb3e4b9246da27ccbbbdf0e6cd3f4c7a0f39f1be985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcdubq-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4ba0ebf013923607b1e14a15092493fc8513de476e62388e547710b0bd5aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_bison-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5348f2293b406d19d627c8bad5cdfe5d1ca62d9b4cd7d8c25e753da4e1a8c551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_rooster-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4be5bef9112731667c0c4a53ede79f047b1b734764a81bfe685090f64cf5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_silverfish-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be511450b4d5b054435636f6bbb28a345a81bbcf87b2d34d78386b92b2336782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c962a78086fe682f81514aa1d539d009f3f1af05a69e25c72e4c4f643e88656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_wildebeest-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb55f454188adf9445006d3818d7751950085c49046c6529cad50e0e9412989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_ox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a452ac2bc83569378a7b2299e843f8ffd738ccb9e2117a6bcba2bf60663c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_narwhal-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674adf726050640ec82969dbf7c708f372888e35778482f7258c2ccbbc86fb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_egret-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5ac622fd4d61e1067abe85e8335ce22ce8c01f751567e38318906021b5cd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...