MAL-2025-109946 Malicious code in ufqjro-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47356b881a8739b28a890728b26b0e06e8d3beba934a5b1f5acfdfd5a6a30e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109213 Malicious code in structural_junglefowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc6bc6e6db886d484d009d9cdbf4836e973b03ef67953e2ada0870838b01d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105436 Malicious code in lydtol-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1caa2ed81367bb4402d8d033924b55a1f1edeca17b67b8799eac3323c6c9309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108662 Malicious code in sick_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214ccddee4d1e337e7992da2ed0fa4c6038060ca84400d65b321e083b9f55992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105332 Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105658 Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108465 Malicious code in seblakkuah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e82795a8576ccf7930db2ba05c232bf80ba6ffaa8bf30b9f2cec097c88303d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100262 Malicious code in carbdgonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2c3b11a88f3747af265c96348542e37cfc010adc531d327526191b75b6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107328 Malicious code in progressive_chameleon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025272232fc829ee221016ceac4ae0c7f300cba39cdaaab5105659199a812c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_sole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0914ea8ce3d933b6e76a54965a9ff608719ac33d2a6b431f326c8f9c36ece4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bbfbd5f029bd4ca36db594ae68e5d8212ffb479ccd134997a7aa5c29cbd03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_alligator-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2363327eb6bae6245a50a17677347d5a13637c7a02ef1771211839bcc4354e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plavuf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21753d215851f924f511af3e6d57d46b9139bbdccc1a97bc916207c1e730588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_koala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef8ab118f1fbacb42d6301aba6142edaed229e215b7a8b094c1e78c53032aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_bird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9920d3eded7bfd256d191f92c7bc1078e37edba6e9e88433ac0dfb0f2ec19118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_urial-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60ffeb1d302b48946ac955b03baa103793864614d9462eeba6ad572e7c3b3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a7b237b2d1de85d94330018f4f47ca0a2cbbadd946480bcb691e12a2760ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_nightingale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d27c4441ffb3fb8fc76f37fd80dc9519a655381c2284dc58c747444bad21d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10326049360feb13dccfa1d2231d3f173aae9f2aaf516a35f2fe51e468c3c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_capybara-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c39d29e9842b4ece8d44f8d313f52fa48b3da99952e82f13a59dfe1a9e299e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...