MAL-2025-103738 Malicious code in hljwhb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfe5e9ec4016f18fd6af0a29de472cd365624159544902ee3fdbe93ee48373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102064 Malicious code in emotional_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101781751aa072a0f3147a3579922dc8e7a74c0229b7bfa8b09dafbd5c1b6760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100784 Malicious code in complicated_gorilla-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed740e1d2ccaaa6f76e4e85b2ee842d313dd58deb202bbf130d6cf898ac54ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110344 Malicious code in varied_crab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6027e7c412e189b9cc959c2d4790728112487266e81cc91809011d782e5a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108949 Malicious code in southern_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bb8ebd415f6d7f3857d8d9f93d2b48588593c753f986b4ac2ec4647bb1ef6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110174 Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106204 Malicious code in natural_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce26dc1be53ed19e9eda525aa76b4217a1685002aa813a6450e22cdbbbb2d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ukxoku-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17936df2dffc0696ba62849e12678c2e19edc03298446ce97e1e2c544183cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d074b4bd00485737ce35206867051ac1d61682b4e5ce9c468f08d4023d31c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_bug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59624d7b06479984b50d5ef39d89ffbcdfedc9aaab1f4865b3a7a28fb7e669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_silverfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93a672045fca0b1b5dc3e340f4a19698940f56cb3cc1baf385909be1aa7339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffcf9c5ea97e878588eb71dcaaa50729af45e191254b55fc50831664302f8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...