MAL-2025-108553 Malicious code in separate_eel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e305edc5b45de350338503438e1a1ecfd5f7ee636858faa337e2f4394980e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106068 Malicious code in mwlxkz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ed60deac2c962bd446aef86f5961cf107e43f573d4e92773f36cf58e19346f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110255 Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102656 Malicious code in fdhsdg-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1072725c52555a9814c20b62a4729fdc4ec9bb1b877d0c7569e8100ecd6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103984 Malicious code in imperial_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9efcd03d060fae3da686fb7c9ec2cdb2d1a836eac889e15eb08a8086316489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110033 Malicious code in unaware_marsupial-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56ba771a6b655535e524d907d3c07c451351f19ce1c30aac97e41cbddd40132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_junglefowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc6bc6e6db886d484d009d9cdbf4836e973b03ef67953e2ada0870838b01d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3697ace19e8a0df36653086d375e7bd806f196c27d273d6a77b3cab290e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e34f364ad91a1a39f97ee9f8ff032c2e6b28ec2bdfa29af0e575f638934ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108477 Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99720 Malicious code in awkward_nightingale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4bdf3173bff7242928e9f93ed65d8be23d532e436bee4b3ae7aa2eff99033d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8923bc9f13fc4e57c142c1b7f362d68acb34ff837cec0fc5f262e193907a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...