MAL-2025-100807 Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105369 Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3c97a328223b8503c27b685def673b6e1d750baa3f3a39cba10592a0f1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111110 Malicious code in xenogeneic_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85618a42bec7b3eb58e517cd319a13be5ca5047003a4da98d4c292e137d2dc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8ec3f5dc596786ae94acacfe7684ec3a02d54eeb126fff9be8803447b76470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101254 Malicious code in deep_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99d984c981fe043d52ac1bbaa6931e89736ff7b18f2ea5c16d3d63f39cb6442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba8640542d6a0bb96b9d322de307bce4bcfdf1257b71a9f961f7dc0d62b9ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_otter_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed006fc8d54b05ca808d3b1a4c5ef864abd054647768b4df4a16cabcb81afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional_xerinae_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd92a412d8c44f114150735ac92509c1a3817bc4876c524323adbb36a86af28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee2431e9995cd93b8c55616d1f2267275658fcdb60942f6899d80b23f5c2af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105919 Malicious code in mobile_dinosaur_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f8d4faa6761d581927c1bd4008f4668f9e56ae959b1c2b94de0b6479f1f873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_antelope_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3af04803bb044ee00fd66f88d32544276d0c74cc24f273ff7d0d61d6512f75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...