MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110642 Malicious code in vuuron-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c02b10bc5832acb7834829dd6b2e938305a411f5c01fcc3be5244b5596a9617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100895 Malicious code in constitutional_macaw-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f22edfaa486bda0b75cda60f8a848e59ffe255d2ae587e92a3d6384d25777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111357 Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_duck-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6465477f35f612b58324fc071bac1a512f9a7ca343762142fb02b654f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106815 Malicious code in othbxw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1078820bc7d1cb44e60edaa67fc7bc9f1ee306ba84504fb2da9ff6b2bbdd414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105578 Malicious code in mammoth_orangutan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb2e000ae7fa58c22c32461a279781557748e0aaf10ac77c25ad6a57f06f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_catfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981b419a65046ae3a8cf884d09a41b38963a0cebc2b5eda116b854477f3adbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce3f1e01f1dc8a0c517ae7c02e1359fcf22a88d5c3eeb2f42b3ce7b55081519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in euvogg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20386d122fa657c80550a8cb02a3a3b7bbe870fb9458a97d6b508039c80d50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106211 Malicious code in naval_ladybug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c3c10bacbf7eec25832a25b240b55754e1c6d4795ea1d0f5d0e8e8e3dcece6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_alpaca-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3e210ef34ed5bcbd03120ee1ecc8eae1419bcbda9b21b5c5e104e14f895f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...