MAL-2025-105958 Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102842 Malicious code in fmgsra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83fe61d870bb0924ba2dfa3c6a92203e7392adccd6fee1f902a7d895cf7452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104838 Malicious code in knmfux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffd7aff8a3f6eaed02ac0abbeb420d841ca8fbd40dc87c717588dd5d624c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104757 Malicious code in keen_toucan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1524322f1b898e9d2d02899ddfe53b27c0ce3a0e7a6cd4e90f5ff4e3bde652d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106301 Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e77e39ce3d8c1463157fa35e54a60270f7279efd4bec08c740485f2ef11df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106850 Malicious code in outstanding_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e294690e4a88bf1995aed5cca42cc029ef2fe2cc1dd2ef0ed28816c42a26819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108429 Malicious code in scientific_swallow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38debdb6cd4ea03e108df7494713334252f9cb7b8b6a81f7a99733a96f16035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104770 Malicious code in kiehtk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb8344570ec93722b755b56602f9cdd1b330268ba05ecd6bbaf51b0ea4ee8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108329 Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_starfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07676c5f218e1c076b77e2ede86873483860f354d59e98ec3921a92e5df51a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_shrimp-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ba6fe0a6f98b5d65715842bebd85067b65a6da25ba15ca462d2e9ba3acf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187d144403d7d2e7f851d3bfbbea5eb00270eee9ce6014974b60157e24a720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e78152a8aec9a5061cf11baad87f57f85d664312384ec12b6fdacc562dbe51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...