MAL-2025-106815 Malicious code in othbxw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1078820bc7d1cb44e60edaa67fc7bc9f1ee306ba84504fb2da9ff6b2bbdd414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108164 Malicious code in rnauws-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496353487302d4855d57c7b89580a71d04a1f4a2ef164e07fb604291aed3d08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100092 Malicious code in breezy_dolphin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb25201ff2dc9af62d8680b45b5ff94ea3f2b281b93ea5cf357376d4a289f511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105623 Malicious code in married_ape-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8776daa5dbda0422ad0ad0ed93cb739de89ef9d4582d8e63b6e38818a86441d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111519 Malicious code in zany_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782494d75dc504b09679355e12cca55a4c98a9375eb3f3ae7f362cd79ee1b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43e922187a268ad098c4245d0bfcc479a9c7861536526a0d7d5add57631e45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070a1df926629f624d804f88908574eb899b3dd525d86c3adf2f6268f264f3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xxtmzl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596fec4920ed4699df8f0540087a702fbb43649de3a496e38a829be07c4a5980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0610f878262a93b64fd21657278eb658555bb9d0d17d2e5a493ad09c198b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b828f3ed9bac9f81bd92723896f3a77f55c918d46a4210c119b49f3ed371f80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_barracuda-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8c5c3c64d21a80bb3b2637dbf27522cd3929c7e65fac6427c9c167ba90a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f1e2bd5c03ce5e3f88cf4565da149dd2bae5d36b49bde453e9418a274ce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foolish_halibut-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efa28fa5e0db7da65873a5ee3ae334ae491da9c8686048f1413ba075c09300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_rooster-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68220d91e90273166cb60de12fd5f040ed8169bf1f30c108310d58b98c8ef4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phydfgllo-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a878d20f535389fea60d55942e9abdaf84ffe7b2f519b44f362436f92b2c7350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de64f0e4fc23f1f31de352cc7523751954529609e5883fb8dd12f928d9d8e306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e60abf3d710f07fecfa4062beb31443935dc956fd2aab8412126defde8795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108598 Malicious code in shaky_limpet-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078f64fa55b1efc01e3fffc47797a28a22f37d23f6f37ff5e25013e12907bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...