MAL-2025-108853 Malicious code in small_moth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710b1e1def2699e82ee78ff4898c652eeb96636b978d869ae480e478bb9c7e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101325 Malicious code in delightful_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b48ab3ea3169a7dde866b23c52c5acb8357bd1d5543d831f871d22b87add315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107623 Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107411 Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108436 Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105624 Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107183 Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107815 Malicious code in regional_wallaby-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6f35d66bca5f2751ef04736a0c3f5aeafbdadd4564e51adc68b9ae8dff1bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110899 Malicious code in wicked_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fd2f933a0586b933a5aefeeabc45ecbe554e32c3f39632632ca62d7016c3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbab68f5f804c0ea7ac1ab794e0ba2ef5215cb52fb4237c43a27126c0b801ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_piranha-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909bf177fefab1801b31f905f89cb87fe0901ceb9aa737f1edbc4c0c950dc419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_seahorse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3198a1b8013590d9df4d76ff549ff203fb595a4065a72ba52ee8a04c56fa14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ab83ed5ed2d485d9bae44d0a9462b0a5d59e546dc092f0177cb5bfe3fbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_cricket-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f55e1176610be19126ebe95d0462b4fb3176ac202adfa1c74b726d6f4b14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0f846cc154c0d44efa0aba27fb2f40d0fe0f4716541631750f518cc4485ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...