MAL-2025-110783 Malicious code in wee_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f266dc942105119d6593e695558b240f9039136bcc6a160de4d4eeee2e4cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110969 Malicious code in wittering_cicada-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6a2a699080c0c9db6c28a4a12763e66f78d0c64295fe148fc710c4c86c5d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109285 Malicious code in sunny_caterpillar-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ee1da4f23e82ccf413352c3f0787e061c8f955512ac6d3b25153a5e3f6ed15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108160 Malicious code in riswold-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddc0e3e0cbcc9184588ea8974f733faaee20ab4813ce3dce7f0aadb882983e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e428647ceb4fd4d99bf1f6ae12a0695219f771b8b2bbbce7b238cde689857fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worried_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874221abd70e3fd86e14e8c577ef138411147b2efebfbb2705d540129f55abdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111033 Malicious code in wowwgt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffbc235336eb834b7e210710b2e09f2a7873a74c39ea57f33cc16222ea77509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103831 Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qcuzbt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb9c993b2bedd30f4ea647325166406efffc1014fce4a8111bc587baf0677bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous_turtle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e82dc3b0f97ce480be96933a5077ed96fee580fe52e3f6cc907c9e63e0131e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bd4f38dad914b72c509a8d57d247a9037fd94a36789ccdb4732c4518977c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108950 Malicious code in southern_lobster_blush-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a19fc8d2ebf42b482203eee7c7e81e8b25dec3349fd7482e92568f088ca5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107082 Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5dfab8533c8335ece2833a39c7059dbe10031fd4fd1d533ff966ab24c293e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108943 Malicious code in sour_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bea517f6e647a6b90ea725d161461f4c947859b120cd1896385d578739565a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ec804a6f942039116a47ccf59e42c9c167849fadd7e4a262a497f21bf70e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159fe2f0f5bda9af9b007416e9e8595c1b2ec2b60ab479a94602edf836ddfc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110348 Malicious code in varied_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b75f67668ed5a938e3a2ae1ebbe6a49fbced1d155cac8f67c75a529f2045c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weston-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250d308f574c7477f8147006b825f802f5867c4eb9a4894e07207a98803f1fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...