MAL-2025-99028 Malicious code in aadvuo-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72414ede87d85a018fc1d5ab288f9343c655a0a5fa2af33ae4367cb593598586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100297 Malicious code in cbnkaj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a4aa7909edc8959167b9c92ba2e16a1c411d9e289a2be98d31e95f012616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102274 Malicious code in eventual_hamster-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f8eb01746e33fb80677ce4346a0994e19c9333911158d1b1e3749ccc1eb7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106198 Malicious code in national_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9967e17caf0bcc9f105f85d160bf9a59eb6f7c355b8f72de847092a1e316a39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e77e39ce3d8c1463157fa35e54a60270f7279efd4bec08c740485f2ef11df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_hedgehog-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd47046b5e7f433081bc943a443c8c34a8f6069e457c455bb9ff20a1ff24d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_crane-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0add47856efae048cb4814e8f401487c4311dd9418eb5c58208e323b5d09bd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b72d86e745769f971a933cd450afc4e35f6428bb51530e47af7ae1acec087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce_orca-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cf6e6426698743424ce705f4cd5b49c4807b3a4fb9984d31ea643211285ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107823 Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104717 Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109652 Malicious code in thundering_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b575a2169e299894d74bb5624b7d6b2b31171c6598289256ab212e331be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108403 Malicious code in scallop-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8386940850fdeafa9e69bd386e5a2cf1b2dc851a2d15f27a7948de3cab55e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...