MAL-2025-100826 Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107189 Malicious code in precise_gazelle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7140bfbaaed38281216745d86bea9c04ae36fc34bb9a3896d25d9ba9dd50183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_meerkat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11909598f0f1a8a028d8ddb1d37abcf4301d81f665d4d4ea6eef8ba4526f777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npznxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34f047449aff215ade8104e53bc84106c744c905749413fe50e65ba0573b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_tern-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aab69ff03bd47023ba19bcab7437e5a4f2e2158d9fd25c967fb4a988faa5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_mosquito-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c5cef20c670b186cedbe4aef73eea7fbf8432eff86c11361fc672ccb3989e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_antlion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684517f4647fc66b983a07270c875a3bcf796e30cde9486341dd178106a6096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103854 Malicious code in hurt_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b95cb2436256624efe377a48b49b19eaa9684a06bece6045bf44693b0842c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_mosquito-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf832091c642dd92dabbac0b3c3c905c179241d385e3082e26b57238ce97853a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb395b296a2298b678c80bdc0d1ca9ae94575d09de7e0fb1432c73eae3af22bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110247 Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_swallow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175f58655d3a973fc233503c176a1cf0488dac7993d63ebdc288c16e13df0390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_whitefish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa0d57056e3efbc3a105bdb76ebfd473415bccafe8426aa3b062d2f15dd66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_viper-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d905a470780bbd194d657c28e493ccced2de24da1960f5573c1db217a36a8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108540 Malicious code in sensitive_cat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61a857ecf93af12ca321d328488a53b1196cd7039c66b40f8b4f02a00b7d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111250 Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...