MAL-2025-106354 Malicious code in nlpuud-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac25e32cc7b9c2e39fdf16ddcd3ae385b72a4aea7d31ff1f7d7bd0e48e8c7c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soxfiv-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf6083bfa07f4cc63ad71844f681eb60da6ea15cdbdd1a6819bb44b6239b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_earwig-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e585ab8df4c3bf7ac14f8b50e67986e482f4726bffd85cc8f85fdd62f3cc6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thaeros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8799a6fce586cb318c3bbba9fa553d2d7f82b4a54b74052d33d0be083331ad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_heron-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c356c8c718b6cdb7b1ca4f0ffd3dafc43cf11e8a370ae00c507750911493e15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_lion-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c30ae87af4c7d1f58a48791d09a6fbbf66668125f625181544b3af35f520ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2837e68d7ca36045962730e6f467f3230c18a919672727bd0379e4d9349ff69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal_clam-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d120e8ffc610c5e56a1a05b144db351d02d97b92676cb8bc1af2e887a86e0c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fmgsra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83fe61d870bb0924ba2dfa3c6a92203e7392adccd6fee1f902a7d895cf7452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110075 Malicious code in unemployed_newt-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efef82fff99de55a5cceeaf5a34713320e5f7eb44a72da12d1cb670dc59d4f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107717 Malicious code in rare_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d69e7bc80176727576f8c269103d40b2a922c9b86702430e08594ff4bcc43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101823 Malicious code in dutch_wildebeest-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfab4421174050c7dedebe393a4943a2157351ced5ff035884d938787cffb300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101111 Malicious code in crude_lemur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70d08c7a3ad24864de3eeeb8a32da806f1bbcb1d71a8603290260c820222868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109611 Malicious code in thirsty_booby-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1440f2607031a1cd0f574cf9bf1c047c68fbcd093677d6dd327f7307ca65d2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110140 Malicious code in united_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04877d0d4a9d17642aaa72e6725d85a9d5811a6995139d5d9f67c803c5592ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108972 Malicious code in sparkling_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4faa781c8e89615343ef184a91a40d10c998aff9b31d2d97e347d598b22a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103381 Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105911 Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101145 Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...