MAL-2025-112035 Malicious code in international_donkey_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23347f4a598724598806988ab9b5e1b0e89f8233e1f61fc3b86a5e574665ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic_wildcat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9a75571fb91db16e88255d5d7ab984a3927efb6d3c3a4a5dcd54ad465a686c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101751 Malicious code in doxcgz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef807f2ac3ce086e855d3a4126c846a8c72ab74d1054c0d053f5a96da3f1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99080 Malicious code in accepted_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f67b93bb2bb5381129dab354132809949bcaea1a291da318185338a1b133041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aaba5eb1327b851f30f02a0d61a6833aca93c6f445552232d67e9d347794ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de9e5d7797ca5c0d71d00c7c830c5390ca0d3e592dcb34e9a3c5e03476340a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0618af781330fd9f31ed5b65d43162bd09945b95335bdd144baca13234a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nyghqd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d367f0fc4c7f8c56bd3022f849a674177d40311e006712803d09b1753c3fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_seahorse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3198a1b8013590d9df4d76ff549ff203fb595a4065a72ba52ee8a04c56fa14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_orca-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e56722fa11c0176bac063c6821db1025e6831a73224d0468b979d50e91123f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_mandrill-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8039af2e9b9aec798f34827d43e9d5d65533c7f459f19f9707324904c94c166a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab2c20b3b590825a6c3ada37ff1f00c62158c78bedb8dd4df7755d1d79a2666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d69f8f72973e5cd1b8d4f46ce8a35489e602dea1b1e5602aa2bbd746941b684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4055d931c477e9d80fcd3ce4c460ce34d0d9c1ebac5cf3ec660981be52c12a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...