MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102878 Malicious code in fortunate_capybara-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c23481c31283f861764367bf1c14a064d0b3826c2328cf6b19cf1f73c10cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109521 Malicious code in tdubxv-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e290c07e258a40a17aa9cad498517f274f81950849999991076dbddb91bcf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106506 Malicious code in occupational_grasshopper-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8aa1f05c0975298920d2fe4cd6a95ee7cee904835749e6d30a9de1539aecaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105332 Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108826 Malicious code in slimy_eagle-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995c71084c23e2a26e695c8460ea4ea2194a2603edc60e4a6e363961d7e72d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_cardinal-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014c4d3e2bb90fef0155aae63ef1c55fd4b92fa652b0cf280ec77a778a3e0c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_cricket-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f55e1176610be19126ebe95d0462b4fb3176ac202adfa1c74b726d6f4b14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_carp-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840e715cbf947177b0d9ac2758bbd88d8aac38d0595edd46fc748e443f86cc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50f39892e554e62795dd5e4776a7a97b1021dbd8906ade396a47c267b3afb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101801 Malicious code in due_vicuna-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b060992dbd4caa9f855cd103274521b6588334e6a0432175dc53aa7885422cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100577 Malicious code in classic_toucan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311a6e6658e571b81cc9fc9ec9a9d1d3a6ccf03672b38fbd349edeb2b60c4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108446 Malicious code in seblakkuah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849cc79ca4b54a15080b225a6bcc00af5f3fbffbea9930d8153b4b4b29d42bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106610 Malicious code in ogpkyi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a79114c7a56815a24eed639913abfee12a041674ad471418af9503d6b88cef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105991 Malicious code in muddy_eagle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84f094a7533deffaa09c07ae1fa7ca272a8751aadc5ce9fc02af3b6fb47bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104305 Malicious code in intense_angelfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17d8f57864937dc62937441357e83cf4e20d5562e9a5c555bc5fedb9e2a734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105637 Malicious code in marvellous_tahr-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea05c7a1670d609b3f544d7f7ed1e1d67860ed4bc1ba4ac33bc3bacb4cae7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109856 Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...