MAL-2025-111964 Malicious code in happy_snake_indigo-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0957804537ce9450f25a3c774850c7aeb3705ca0f79e7381a6bfa691f2ff236d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_sole-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9d21a7fb32fb6d3a198eabf4a2df2817b663452f3130981b8e941911c0891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_possum-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f3173d2fa53f475c3fb59c70ddee9524e7f3409dfdc9a302599eae3323500af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_cobra-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16911fe8f9bd4b786d7aa298b638912112535a7513e8f39b087f8dc8a708757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108635 Malicious code in short_boa-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac8ba119194c3f534a1ecb9bb1754e54715d4eb67093211f48f6744e3decb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tkoszj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bbef5ca3d3ac6b565457d9c56e54cd6a3d0e06900ab02f997fa449b910fef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1412180a6f0ab7d189ec04d5360f41620d1c0251896f2d1a1f4e0232aa50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7906df8edec2d798f7cc0ecdcfb756af4f053ef6c2a99e153b08793197323f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101781751aa072a0f3147a3579922dc8e7a74c0229b7bfa8b09dafbd5c1b6760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual_goat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c0b585b9fd26311047a831cdcd81aa690bd0124d75e80256c822a517e3cb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107668 Malicious code in quintessential_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1827c68fa5bbc0ebafe757adc9570320d223b554112d7a534b54bd1a95900225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110378 Malicious code in vczdav-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f35f4d121e936dec7fd585989579d44bba7d6ee4997cc201d3ac3c19c2efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104663 Malicious code in jolly_ermine-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015f8fcaac1e34174592fc41d1efea8d6a274139d85c7632ad8a77766e7cdba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100267 Malicious code in careful_donkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c745058ed6e90cbe29586e213c47218219707b729c4aa283db3e7ba68ade55ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_wolverine-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01672de6b76a3fa460f9f8ae787c15bcfe92fbac8f76c9aa9189e13e0b98a9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biliren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9a2ebbf41608c7579c0c8b07fa6c15953173aee217c31f5aa32f0770cf6c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...