MAL-2025-101613 Malicious code in disappointed_grouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104e6f06d4c3b6be35b664bb04cee0db288b2f3d23b1e2386d34ecd9e5f944ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106353 Malicious code in nlelci-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82730118d46e13073bd27928e56c2e31e8cbb2bdb2de6f50c8678397a432b15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105358 Malicious code in loyal_flyingfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ab5ee36e28d73029581c08cf7243d42fec549a7c907b087076d9984a2fbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2950411052fcf3973128ad2e6e6f61de112e65214ad0083a083eda26d8f8a09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc37128344b98273f1b26c2ec4177469369d75da301a610db68fbef80b6680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c0bce27d616eb61e7ed66b39fc84348b08122c6b943a176da7483521f3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_xerinae-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866d09abc16757d4d76defaddd023e85a31a0386671c2a41220577ad9e6f3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_lamprey-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587290f0d459313c33c017268c63ccb89fdb6c1edd4fda7decc1fc82d964a167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102027 Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_egret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d327b9787d83a6fb54772e34dffe2a981db98048061e6a10e99ae26db26c5265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104380 Malicious code in iplude-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1226b940903fadf84485ccdb2fe8e76e28ec4bf5367b3bd87243e4d0fe85fac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...