MAL-2025-99129 Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_felidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3105666e5013a45815910d01bb64904f0dc79e3837ff0f3b68830fc213cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103073 Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_bandicoot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7aeb0fa3c4731b7ead5e36d40c88e56caffc383ee50f8ee04dc7753eec00f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_duck-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6465477f35f612b58324fc071bac1a512f9a7ca343762142fb02b654f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_ermine-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4839531239ae390e8e662a283b886439bb366a8e854d3ac6fd8ff90c2915408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110642 Malicious code in vuuron-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c02b10bc5832acb7834829dd6b2e938305a411f5c01fcc3be5244b5596a9617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105332 Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_junglefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d9eb032824f99b375523f8324054e39e245740e39eb10ff9ca84d30a434592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111357 Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110057 Malicious code in unconscious_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6b6b02608d586b59914122617c5b59ca15392b624025f4ea3482f305c9a3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_alligator-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eee87d4d5116422714bbf1307dcc06bb4129490582feb2d5478b75a80f2d46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_catfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981b419a65046ae3a8cf884d09a41b38963a0cebc2b5eda116b854477f3adbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_silverfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d915d00936e1ab18761c24bc969630654ba3337a5d5fcda03bee9f1e25e64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...