MAL-2025-100305 Malicious code in central_mammal-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfad6716f71da4a8a30461285e8671ce14745b752b329700a96fb276efe444c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105509 Malicious code in main_koi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c94d80d252925abd33430e73cef47d292d0009597c8bbc24494108792b1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106858 Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110227 Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102681 Malicious code in few_bear-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259341745a0f317c664c93f5de5a962f1e2ffcf2312b9a7f84f0bd7500239c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_planarian-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94badb17a5f44ea245f11720ca9e8e1440dc5200a269a7f9be06121bebb56474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msband-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c50b1c2fbdd65295dda38074888488e513904605ca5d0b59bfc40eeb843917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e310d0fb1b94a901a42050303e9466ef5336243138543f46342af72731aae549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f630a9549ae8768b39205f45445c3719eaaeb93abf7fb4c0a823b293cb2237a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac6ecb4d6e49713bfa58cbac5c05627199152c28b0667059d1299a6065df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_raccoon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc7e3860d1433355da3445680d762c080894f3b6b73e9a8bf7c6b4df5def29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_starfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb217c941d8b5661c99a35e1513f89440dd82c72ba61881fd47efbfc97bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7caa5ac092254a0603516e1e4df414ae5cbc0f2027e7b1b94f243790853fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105142 Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...