MAL-2025-108465 Malicious code in seblakkuah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e82795a8576ccf7930db2ba05c232bf80ba6ffaa8bf30b9f2cec097c88303d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100789 Malicious code in complicated_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0618af781330fd9f31ed5b65d43162bd09945b95335bdd144baca13234a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105722 Malicious code in mbwkje-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0de41f66e960e0b431b1f60db7ad84edd79f257557f65726507bc69d51a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105378 Malicious code in luccy-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e361e51f1a0cf64c7b5cd0c40449bd026c6e747bd298f00948b46afaf99b3de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108001 Malicious code in revolutionary_starfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e980a83d58f651ed6ae0c0cff38feb41ac4b5c7ddb2469eb3316b4b5c2c401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110333 Malicious code in valuable_stingray-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46da2a6632651649e10b96f0d671eb021fa1b2883ae589cbb96052f8c1b730e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109808 Malicious code in traditional_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab2c20b3b590825a6c3ada37ff1f00c62158c78bedb8dd4df7755d1d79a2666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_loon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3369fcdfed5dbcd0bf184f94773a6f6afb7061699a5e6f377bfead1f9e7663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_spider-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e44d8738db77bb30222435ef2a4175acee147ec4767e84339eff1bcc7de734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_gayal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18715632d0078312929206ef7bd0633de6b81375822e3b652c1d73405b66f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_slug-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4a3b157997297e5b5f01a9e6ce3c3d231030b31a330cec5cfd36eb0a2ee897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2837e68d7ca36045962730e6f467f3230c18a919672727bd0379e4d9349ff69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thaeros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8799a6fce586cb318c3bbba9fa553d2d7f82b4a54b74052d33d0be083331ad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_moose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b55d2ccdc5f79ca35c2f7315d2920945890e71bd10719649389f5f6e09740e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb11f1a365109820b7863ce67ba71d389332426c20b0d691758098eb8951837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_vole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6315a38da08fb3aa2af436fb979f08cbb69431f9c00bbe686962df197581250e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qhmlkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177f8e3a163ae52d7c58bcd58d62dc7a08444cde0b62aa513c796d2a600a6f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...