MAL-2025-108050 Malicious code in rich_chipmunk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb6e8c6eab2c2bdc29892c2433fe8286a783b60c8308f03877673c68a4a17a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108294 Malicious code in ruling_wildcat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf792641b41b15e39694c6512650f8f1cdeb9c53deda9947f39618a0bb76a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103711 Malicious code in hidden_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc28685cd763c2b89cd617f71949bcf9d6100697ec78ba07e7e36cebb580726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ukxoku-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17936df2dffc0696ba62849e12678c2e19edc03298446ce97e1e2c544183cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d074b4bd00485737ce35206867051ac1d61682b4e5ce9c468f08d4023d31c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_bug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59624d7b06479984b50d5ef39d89ffbcdfedc9aaab1f4865b3a7a28fb7e669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_silverfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93a672045fca0b1b5dc3e340f4a19698940f56cb3cc1baf385909be1aa7339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oeaaws-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd18844600be94e8ccc6c8f75726c5bb142595b1b5ab90c3250b00985b6db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffcf9c5ea97e878588eb71dcaaa50729af45e191254b55fc50831664302f8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zxozza-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ad14fab8347c3100ffada516ac970e3ff45c6234d5aa16215ee713934ffb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93cf57433e730b32691fe1475d712837a2e1bc47f2678cae8b3fe654c7e4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_cicada-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318f3382affa6320ae638b9292d21276b396ca313626751d5f4e26c03472df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...