MAL-2025-111534 Malicious code in zeroth_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36ffef3b59648ec6a697baeb2630fc67334f8b50258bb6c239e5841a2f8c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108211 Malicious code in round_caterpillar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea51fa40838fdaa724d58e310be82239f89babeeaa9d3134ed643856cab96a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100007 Malicious code in blind_chimpanzee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf0e4fbf0d2ece0ccf90aa0615bd10c16bc132ae751a5549c19ec9df1296d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109098 Malicious code in statutory_wombat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ed0bc061901586c4d4d60e1ee6cfffbef4ab02e8edd0114f461b656ecfb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107064 Malicious code in pgpwox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d89b3f7c64b6d6cfde6843c7304a41070d45a08109fc44edac56ca6b8db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106928 Malicious code in passing_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7bc17f2306184cc09a600e17dd676340819a884dc46cf753a02e4c784caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106925 Malicious code in parynnon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3537c9a87dea1ba7d98d604812925c145cc445570be053b36989ce0bc47550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103834 Malicious code in human_bird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9920d3eded7bfd256d191f92c7bc1078e37edba6e9e88433ac0dfb0f2ec19118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101048 Malicious code in crazy_ant-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51cc3ffbdc0185ca6c491da761392a8327902115b59f650a328707cc3012708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4b680ada7794a690a49f3398cea1232c2f6b115374d37862c60cf6780350f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94bee89b6c7464263275e5fdc4bbdeeebb8d9086d89da0bdfd00a8fce3e78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideal_lamprey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4eda82530b36e251beaa7ec696a4056efe6607cde873e6564b1297035395c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_armadillo-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae3eb2332af1e6b398bad9dbfa821216ddd3b8b0b80e54a92766d157b6e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in papsdaya-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b74bd7a1b23e9ed4e8051c29f3b0f5697bfc1ae1670eac89e4789fe42696cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101786 Malicious code in dry_leopon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a198469d162a2dcd44a241f4e10d7dbbce82d064e1c9e49aa1ed1d0229cf904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...