MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110247 Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110458 Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108557 Malicious code in separate_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dbdf7aa1ac16acd38dd4321a2403fb6b76b5f69fea6c5afe7ce6789f32cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100086 Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106401 Malicious code in npdhrl-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babf6b7101b4cbe82bdffc36c31b149d6ef88e16f3950c480f9681051a8cfd69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105369 Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flxyop-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3954951441fdefe36fea6c9bc7a2591b9997b6217717632e9ea2f1e106f76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_stork-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac9be1277207513775528cf235991ab5ed347b73328d1af6d3e02e732745b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_peafowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b649195355a00a4c4f5dc871b1e8e29a5d3f7fb60c35488c34ee69e7267bab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious_finch-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b7b7f88255c0f8e12fd054db53b325f01929e898869db28bf037bf24432f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60022e68dc312105b3747b601935f8c03054e655aa953166b17522bd1807008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_starfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07676c5f218e1c076b77e2ede86873483860f354d59e98ec3921a92e5df51a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109414 Malicious code in svqkuj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0434ec3ffb71e9d31eb65f3c696890ac0860364a2ac51b72141a601695e3f6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107149 Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106735 Malicious code in only_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3b06adeb2254f7f4d9b33f60b383f0aed0e54ec8be2abc1cedd550c8eabfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104529 Malicious code in jcxgnj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b88f8b822790f408090f090e09702928972d16314d525ae4d325d4b9fabbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...