MAL-2025-100801 Malicious code in conceptual_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9d50f74e68366232d02d52880ffde7ef821a03f669e20349ff1ae1dfd4a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102732 Malicious code in fine_rat-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db601c19fd5bb0f9f1dce799f9a6876cacd8044aaa2bb55d4c3ac4b46f1928d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107103 Malicious code in plastic_dragon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85dc0a27c18cf6ec3cfdd72c68321bf2e51f654f77beeb514e160faf55d56dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_parakeet-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00966432d79d8d3224146fb2a2524e5457949626c5049edbbb5defe58b9def40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_marmot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a16e7e13eb669005160c8a8aea47689ad11e88baf7eb859220e132ebc6d1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de25f04d64388f6ca33c3315899d11e808061c0aa8af4c9e89c6e9206770148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4def0a84e5b11f51ba579ff844b1f100a1464c3720e82c59a398e93d4d5e517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_duck-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6465477f35f612b58324fc071bac1a512f9a7ca343762142fb02b654f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aab026914d3ca197611db8483456ebb0b8e3857c677442db9fdefe17cc16bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108194 Malicious code in romantic_mink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a67664be1c3e9c04d5e35b30521448c9e15f5d9b3b8d8a20a66b6c43e5de833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108050 Malicious code in rich_chipmunk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb6e8c6eab2c2bdc29892c2433fe8286a783b60c8308f03877673c68a4a17a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107019 Malicious code in peculiar_slug-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4a3b157997297e5b5f01a9e6ce3c3d231030b31a330cec5cfd36eb0a2ee897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105261 Malicious code in literary_stork-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4322dab26dfd64cdae587e52e3a5493c9b3f6b208bcf5b986c763db9884418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107683 Malicious code in qyrnjh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee340ec8e53ef1f55c4a340807fee935bf0a9db87ae8eb1d6b0bd25036a85204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110633 Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101866 Malicious code in economic_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1518607fab29be8f06e4fbca8304dd31361528975bd2ab54c9c407c68bb03c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111046 Malicious code in wxbagg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5866a1914a1c5414650722049467a273a198d8a74edc79e26968bb96446fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_mouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4779aab2da3e52a1da1cd71de1190b7ffeb6d51b2c43c679ad0cc0b6936064c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological_krill-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8647bae590e72ce8d9ea934ca18233311e41cdb02e45de85a703f7fc68ba9a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...