MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99536 Malicious code in arbitrary_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4a2ba0e12efd96824829735cd7b22c6020d6d01623c8254ef917d03e2f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_gopher-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce18f45804fb814091ffd51341a436fe1d71bbcc05509658b45e79fcbff85e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_smelt-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3d5579f20ce5db60faacda65cf0f5a9dc27988700f6264c23edb4d26d28a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99814 Malicious code in bawiwn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dada283d2a00c3b0d45cfa2bd4e2401c213c52e5f45fb8474ce2d8513acc0c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15979efb694fd752e7e4fc39e8a3e34cf784443ee0515d8d8c678a9057e2de12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de64f0e4fc23f1f31de352cc7523751954529609e5883fb8dd12f928d9d8e306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_kite_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ab0f026222ced597e4fb0c991def80d92ace6f5033c8ed071c203a2b81fda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_crane_magenta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba140b3a88f7277900b6fbdb053e653ad5529aca1c45a4d0fb0956efd7f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100500 Malicious code in circular_crocodile_brown-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a04cace4c91a54bf497d2213b4422c4d78ea7cd3f34e91c6f6a953c03140668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109836 Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_reindeer_copper-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09cf6573c1b77080c3e4bb0dc719dbae361440d88eedbe2b413a8d49965cff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101651 Malicious code in distinctive_dove_amethyst-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf3b392c75d52c7ac84fc042d69bdd43b16c3b9d84cf761a5634f1f82909265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109574 Malicious code in testy_starfish_sapphire-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb49274bfeb9bb9ff2485eac1577a8f97ba458c82b3a77b280190434610b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...