MAL-2025-107008 Malicious code in pdjblw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fb33963862d289e4e3ad9a2073296baca8ade60882be01327bafa4aa1b054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_catfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981b419a65046ae3a8cf884d09a41b38963a0cebc2b5eda116b854477f3adbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111357 Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_angelfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17d8f57864937dc62937441357e83cf4e20d5562e9a5c555bc5fedb9e2a734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9598f6a80648532280d8661db2a7f3e963d405e8ef1f177b2f0ff9db12fa711e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in khmfpi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957501cd44c1e9cdaebc3c8428d0527baebad1977c605e2c3adca064aac9751b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104720 Malicious code in judicial_flyingfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d61939e697f21b4d830f3670ce2463742855aecf639743eb7225151de79adf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109947 Malicious code in ugfcox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3674c668d9ca8237d18b33e7ec8c3baa3443e24d21907845d2e5ae9919c86c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105332 Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_quelea_magenta-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3f24d5adc117a5d3b4869a7fa21980652fb1d8c958512ca1dd3736a26341a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_swallow_ivory-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95261b70357f76d7f0a7a9d39af1ac17c287f8199b300c31bd34a1fc15d920e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_slug_rose-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4f7b9e288ddf6b01fdbd7c791bbd990dcf5894ed6848a24036b40848b72dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_snake_lavender-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a0153304f61360dd14bd5dde548863bd0b8ef2c1a85941769b2a0aed7196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_crane_magenta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba140b3a88f7277900b6fbdb053e653ad5529aca1c45a4d0fb0956efd7f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_elk_maroon-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668acc36c186f6d2b1a2576dc9b17c58658e77cf98521363367cfd49d74071ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sole_purple-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22eadf7a1adf8d7167b9f2f589f0aba5890e6960943891077f2ebf1984953338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...