MAL-2025-104761 Malicious code in keouzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887479560e6d4227fec23022a98a6cacff6f5486c88b94e040bc1d489cc5be9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102664 Malicious code in fellow_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eec4c8b4280a7b6bd235b1734459a1d520c2348254ebf68bf2ad186eb4b1b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110347 Malicious code in varied_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b239c0fcc548b9095ef74c6ae051462c9c045c419e3e8f4dd4e3a58868d02cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_ape-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd4d1b35a83678e1f0d8e88c2d3fbd72b6daff9face7828567c6ac12754e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59f759d05babf217ef9b42e6a08ac40995c0ec0132e21a9f8ce9ef97f7b178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4d813b647095d65ca18099aa34ba7a1319cd76d3d5f51802d132eb732546a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_canidae-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1075f0ef95d5cdfba3718286087f363a0241e0c4ac23640238ee56eb825d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070a1df926629f624d804f88908574eb899b3dd525d86c3adf2f6268f264f3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b72d86e745769f971a933cd450afc4e35f6428bb51530e47af7ae1acec087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103970 Malicious code in immediate_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8ae812b43354a7a41042d52f81becfcfb3a84bb01ebb9cc9a25e5bde916884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108598 Malicious code in shaky_limpet-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078f64fa55b1efc01e3fffc47797a28a22f37d23f6f37ff5e25013e12907bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102145 Malicious code in environmental_seahorse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c04c442f46c5b70ec278416674308546f1fded098c574be85feb870cf5184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_marmot-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1697a5005ecca9763a1652ca4e588f3d31ab296a522fdba13f6ff9030ed4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108217 Malicious code in round_piranha-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaabf8ef8c2e01959a3bfd5b5916dc27c5bd1675ef7f98b902ac37feda7d429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104272 Malicious code in intact_scorpion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6df0f72dcbaf523b58355090a5402d48ec85ef663207e1b5c668c7dd0089fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110604 Malicious code in vocal_clam-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d120e8ffc610c5e56a1a05b144db351d02d97b92676cb8bc1af2e887a86e0c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102135 Malicious code in entitled_snail-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c96c1c42bc750139f331b39752f1359900d4dd6290f862298d8f2455454f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...