MAL-2025-111253 Malicious code in yawning_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20fbfcb3e6084c8c0b97b790ec207735520c7e7378e8f6ad24aba213b19c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108929 Malicious code in sorry_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bac6f265f8b2541fa10de8a0c816821d493386fa737c816134a05615d470a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100847 Malicious code in confused_possum-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f3173d2fa53f475c3fb59c70ddee9524e7f3409dfdc9a302599eae3323500af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101634 Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111547 Malicious code in zestful_porpoise-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491e133094dde82ebbf17cf167136e4a0a15712d62f26523f0c63bed1c4e504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107762 Malicious code in real_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d23833f480b4777fea6e5d7cf141a3f392fe33e7d0c2e02a0fc06df1eb843e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109773 Malicious code in total_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bd140b9eb0d3a7e13dd114dde8f3f2eeb0282c558e975e2558745b975b09e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110613 Malicious code in vodwup-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3c910a1ff9438009e5895d457d67bc9cfe726c319372dc30c7949e8bc6cc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110310 Malicious code in uxjgea-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ec0a4e66bd98a7927eb98d97f4ce6fe31317157b9cf8945b6dbaad4f7e922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99074 Malicious code in accepted_jaguar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b299131933774f78c31508b66d1561fb075cda0d16e80fbd2c62998e704a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109796 Malicious code in tqkmnh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f7daf9891093e59791356261992d62bab3a9ed1115e4c168665870d470c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109271 Malicious code in sudden_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898799e6f1e7d3c0a6f909c7cf7fe21fb88af7c7fcb34cb22ab57f1cdda3e8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8804d56ffcca17e9e5b4c3826cabbc3166e39ceb6031ab5589c351778dcdd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_sawfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cc8625188b57961c9d3f12cd0559b465ad1ddeb4f99e82216870b2761e82ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_kite-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e0626eaab45b6fad715b8e901c16b17518a93b08d43bea04ed396764f65ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_alpaca-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3e210ef34ed5bcbd03120ee1ecc8eae1419bcbda9b21b5c5e104e14f895f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b24602d97058514144f5e583fd3d127cc8c1f5308b2d8b36f9295b905867804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tiglon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21adbd72e2c70d9d6e55e9b81415e15d7fc33fcfd62b9578ec7a2add8e88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...