MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101613 Malicious code in disappointed_grouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104e6f06d4c3b6be35b664bb04cee0db288b2f3d23b1e2386d34ecd9e5f944ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109860 Malicious code in tuna-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11aff4df951317030df43414b9631974d7920f314f6f66d7f220c72f04b978e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105905 Malicious code in mixed_eel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0911dbfdd1ec7014bf298b887eb25bbe97601d17701e2dd16745d7024c59f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7231bd9bb2816150276dcba4dda5d981eeb6d590ebb6fb3aea9e18278a4fc799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_roadrunner-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd7018b46bdb796bca285526d3a8612642e364ba0dbc6faaefef3bcb2313860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844593809fbc519f50e5c3d56054a8d3e0b772f64b77e5cfdd7a250e6c169eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msband-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c50b1c2fbdd65295dda38074888488e513904605ca5d0b59bfc40eeb843917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f630a9549ae8768b39205f45445c3719eaaeb93abf7fb4c0a823b293cb2237a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_planarian-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94badb17a5f44ea245f11720ca9e8e1440dc5200a269a7f9be06121bebb56474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e310d0fb1b94a901a42050303e9466ef5336243138543f46342af72731aae549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111027 Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...