MAL-2025-102744 Malicious code in fish-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46869cde55094b47a8fdbf63532a56f7467f68ad6fc3f2cc07210283b5a365e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imefcf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897418c5ff6964964b9ad021a2d5482309ce3dfe545c42d8b81a5c7b8a2cc543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e33728d563750fd64776902d686f1b2048fd96525b876c677bb6ba5ca815f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ufqjro-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47356b881a8739b28a890728b26b0e06e8d3beba934a5b1f5acfdfd5a6a30e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110356 Malicious code in various_leopon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4cf8e41f04bdd77627f13189b98314c611343cede8fc000daf5fdc9a5e51884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100971 Malicious code in convinced_ape-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359edad6107968037277cbb3e4b9246da27ccbbbdf0e6cd3f4c7a0f39f1be985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_tick-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_cuckoo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee93056e5b98657bea920e2753c27ee7b5cc8b5973e080522b36817f509216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105658 Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108050 Malicious code in rich_chipmunk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb6e8c6eab2c2bdc29892c2433fe8286a783b60c8308f03877673c68a4a17a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_slug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12b84c51d469c1341c7af1430f863f4568d5972501a4fad15c820ad8db6fce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...