MAL-2025-111560 Malicious code in zkfpwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbe85c5658ba8c5aecc662cbc2a186c7ceb6577c561461d9a55dc2be9d3ed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107692 Malicious code in radical_finch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b47764126d4728b0851837795a0b9dea0041db6d471582f4f79df2e88997fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99470 Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100834 Malicious code in confident_toucan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc92420dd7ca64e458044aaa0144643786019b9037ab12f6a5fe6f5b462d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108308 Malicious code in rymzol-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53394981458b70e8de67cbfddb4424dfd2c836474a9022650968d4f02cf50e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ea8f63b13670df5164b84e3f837015a9e3d917700d37a9afa9cfbb6a506e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_leopon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a198469d162a2dcd44a241f4e10d7dbbce82d064e1c9e49aa1ed1d0229cf904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_cardinal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf7a617064696cd10ee3afdec868164e1a5072204ce4fa9a65124fbff3c1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7a3636229571c428e2877e0c9bbce95d0fbc7cc7751cd817f7a8d0770015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616fe1b68ac5bfc4e12c763622cf9b3cf7126c1055e2e53ef928c9cc7f5d3ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_hare-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa5a07e63396805f3bf7c13174c7bf158c959cf0c543197a029538ef45f4a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6543e02bbfef9992a4e7739de9979704f9827f20601bd789847ca5a9691f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_junglefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d9eb032824f99b375523f8324054e39e245740e39eb10ff9ca84d30a434592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108985 Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105787 Malicious code in melted_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d863cfaebf6c845932763ba2d1d77df7db0a0b203cad1de277858409b1d57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105797 Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...