MAL-2025-105367 Malicious code in lrpnue-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e645457ae640644affbfd92c8e48a3d367509116cd2e3d975922ba85223b07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hgkzrc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba9eda2010c04c284344686ba016c49e8473b45e8d2d98952683c95a7b2b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108420 Malicious code in scattered_anteater-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06edbe9b7e93a98308e80f648b201ee2c2b0a8aefaf044137f58a3807eac560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110638 Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_landfowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674ec6e693db962daa7c2431520ee7427294454ebee1d2ac5fda1173073f1d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casserole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf620b4f797cfe3e6bc57d0fd3a856beaabab2837cc7e24a6862845b8786aaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hoxljg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d421c6b6a247d3e65b77f0618967f50d9cd3cdbf2826803f86be825d2d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7bc17f2306184cc09a600e17dd676340819a884dc46cf753a02e4c784caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102972 Malicious code in fun_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9c40ffecdd0aaeb6fdc403f27831dfece1993f5da7d07ce09691fd99299458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107760 Malicious code in ready_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcecc8a1d4092b4bb48e08ef8f5dbf1c84fad2232e3b5ee72786655f3e4015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104969 Malicious code in labour_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3ede25a0bf74e6fdfb9cf72f4d4238bcf2a50706d7f31a6dd8630d96b9dffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111511 Malicious code in zany_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025a5a03c134bc1fdcf95ced1133c8d30c6dc2393d32f4f3cd18dc40d62783ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca198ce8af918d257acbaa8e4ac15060ee0be8d6f84875bdd3ce1cc7b0e12e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcebaacf02f4f961a31e8fdfb46d58b425d0e8382ae392c79cf9b8a8aebc95f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109834 Malicious code in tricky_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6bf3a311443ac1eb0f4c17ee8a0259938f66defc8f06459afe562ffe48976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ae5fb7963f53895acbc2a00eb6274c62b7568fdea8de54584d8ab4aaa1baa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_kingfisher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5b439c615779e2d41ac2b240bd5989e6c02d1f307db2b3474afa3d7b17a49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd6f66e130d34eb1f3d22eac0d1817a81b391e96546eab03b8c180dc7373d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...