MAL-2025-106066 Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qnnkan-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fba9cd6e1f1fb39237b9e93728fd33c0a5c50f3ba8843bb7f8635ffa02f00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_woodpecker-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f592df82d9c0671aead367d26cc922ace2f2719654c3f1d233355473111e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338cae6fc1150d3977804ce22de50fa32ea2b1008ebf89021a6bf2e300ad2f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107807 Malicious code in reginald-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0190c6bef403b79452ddcb23e3420f8f97b434c7075b127ccd5da27c2861bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108802 Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83743c34bc5ee4a8721d33c693028d87a3d31cc3094e3ee9ba58addd78010e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-ketoprak48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8803ba9bc288ccffa68f1a063640f182a1fa560d9c076d54a8edf3a9cf803f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8fa05cb67e07b43c671d55a5c772a615932fffaf96a0a7b816da6d46bb1cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_llama_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eded67eb1499d82de4528421f75a12c3c7b89b4e36efb84fc22e87dfe85669e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-kacang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0947d8ec91f80668c430bd2928daab875bd221fc5e54154737305640cc0126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb573350ed7eb482a4351b011dbc059667b28ea00ff924721bcd1b4e01469b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a71d9fedd5e3b96b7f85f4235b4b85b48db3133599cb5452048a737fceb176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92318 Malicious code in wittering_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10d911b6c3850d7a4220b522a71de0077e257bfac994e5c65c39cefee86f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83558 Malicious code in bayu-tapai82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1aff4291e7f7c32196b11a5ca7c6ab437490615dd36779a259d933fe6e60e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88916 Malicious code in nurul-nasicampur75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164c2c311ee299bf982c17dfcc747596ecb1038508a22dbd8098bd7c94417f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f2202514e2a7871e9e1b87033e9e6b4d1dfd3a929d41653f008672a917708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-martabak84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b640330441f60b193f4de8c962b7566f170698b459eaf4fab133f303f414d88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...