MAL-2025-100986 Malicious code in cooing_kite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63469bc2ddbd5a7b96b3d91046aed8d68242b4c4af888eead984506e78b4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106877 Malicious code in ozzlvy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8245b8be1f751638a9925122ff858288a1b3b7ef8ea35814c4475484bf89587d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105619 Malicious code in marked_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5494784f50da19c7e16f72222ec6439c0cbe437e19e781c5afd428920d44da43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107411 Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9958ef5f751ef26631ec53252076fd6018b50d1c0152b0dc1f573fbeb006e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gecko-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c36f0b4469f454340ce2993d0a0ab63db877d5063112f63f8b99ac18f12757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_worm-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377b9c2c58d800c2f9562461e7adb356e0c1b93a1774fa1e4ff1167ab54ecdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c5dfbe92be531aa9e8eaaf1e4b39f15a579a4b7418ca318968e2ccc6e74c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrubhk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3f2df7bcbd982306598a5834256a81b235210d3eb861943e58c792c64b870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66345e7f35162cb5e3442aa40a94dad5535e6a1012ad4f40d01bc4e8decf409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105075 Malicious code in lengthy_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4ee42d8bed08b8c36f5e159bdc9b53084900a612fb94a0ffe05a5f6919f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gvynmn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846d3e048ceb3faf49e129226900f1cc790adcb35e2e4437b787958335c62392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18d2b4f46964c8f2bcd2dd4b4d30a4b398716d75b396dd0c6a26a6abb21374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103636 Malicious code in heiyarus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4c597173cf055a1a3e4391429f82b46d83a8748fc406c4cf0b3bb9f7a72960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100350 Malicious code in charming_pigeon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5b9bb57a5ddabbecf61fc020a3aa3b88510e251262cd4a7c32e80ba325ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...