MAL-2025-105739 Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104898 Malicious code in krsduh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab36e60867e7c5a14b9422174b5c4354feedd74727fb4be90e60a98ebf55fe53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102149 Malicious code in eohfbt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcaf623926376f48f161edbd78fc2e81de0ee74ca720dc619918b9bd031130b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105609 Malicious code in marginal_bison-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9566e4c975bdf1f1a08f9116aaa821517b6280b5c3d34ebc64a762440b71ef8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c962a78086fe682f81514aa1d539d009f3f1af05a69e25c72e4c4f643e88656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_wildebeest-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb55f454188adf9445006d3818d7751950085c49046c6529cad50e0e9412989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_ox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a452ac2bc83569378a7b2299e843f8ffd738ccb9e2117a6bcba2bf60663c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcdubq-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4ba0ebf013923607b1e14a15092493fc8513de476e62388e547710b0bd5aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_ladybug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8c643afe39a6b39ccb891bdbaff93ad876847ba2c66ae0304ae57624431e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbff9dc293fad033029b824d051a757a29917e6d995099caa6719f4fe406587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101620 Malicious code in disastrous_opossum-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f2b5abfb4588f439ace837e8560f7bdb7ce546cde10d93a9caa29f678dc5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106767 Malicious code in orberos-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b1d5282681ca2fbd1343af5c827256875e8e27eb18cd30b12fbeec1024f277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99223 Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104831 Malicious code in kind_smelt-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3d5579f20ce5db60faacda65cf0f5a9dc27988700f6264c23edb4d26d28a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105613 Malicious code in marginal_impala-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1ede95c1e6dc1a3bf63a25a720a5cad5bba329f54c3dd30e16930b505b4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111254 Malicious code in yawning_hawk-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668ba7c8e3fd0183191a1df73d9ffea1642f7e8627673871652415fd7e16732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104176 Malicious code in inevitable_dinosaur-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d016d07b154b87a517f1b85a71bf5208890ecbd40fad1b62536ec120135fda7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_egret-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5ac622fd4d61e1067abe85e8335ce22ce8c01f751567e38318906021b5cd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_falcon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abfd9835d42aee4059292808256b925c26b310fe5e2ead54455336c5f1f4557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...