MAL-2025-102883 Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108887 Malicious code in snmtyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173ba54505a8f48a2a0b6f008e9ccf09bf0f6103880276e07b9d30cdcaa7607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_reptile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e304b5895f3b3b7af1cce8d435cfa105b98666baf0f42fc42c1a3aa34c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_aphid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08cccb2adbb58c79246294d772429fc120635b6c8543047d4eeb6fbd96ea700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99492 Malicious code in anxious_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9672b0f74585ab4694b60279481f3d8323cf680ec904e5a1f559d9b7cbff951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109160 Malicious code in stormy_wombat-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236808146fd31fd47197a61fa557dc4a772ccb7081673da28a4f7df334a11299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105030 Malicious code in latin_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8804d56ffcca17e9e5b4c3826cabbc3166e39ceb6031ab5589c351778dcdd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105365 Malicious code in loyal_tiger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1d24bf9da6956a292092f85406d245e767c822822f5eb60216c53e05c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101553 Malicious code in different_crocodile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916a88750412b67d0c291a46c1afe113e5a0dc6ab9c177fddf4f0648ad5f4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_cuckoo_aquamarine-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a7d92c8b7a98e3de2923f6a0c87c726bd42f4eecaa3a2a00707c1d35343e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_wren_orange-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939b0475ee587a62fb7b6cd6dc1a9e30eaf04b689b3982123e024155bffac898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111365 Malicious code in yummy_wallaby_harlequin-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be7489ee1ee32fd742868c82d6ecfc7d2417fc46fdca39854399e0dc97913d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110667 Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99099 Malicious code in active_snake_white-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae6c69d35e3b94661e044ccd5e7f241be1f645d1c13154e747c00ed0ebc7a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca376496d9693c88f285664f5be680fbbcd1e0157c0e5a634d50b399bde7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff6379b7e10e1c3944462450e4e0417e55ffb5dc041689ef6bd754595c23f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...