MAL-2025-108699 Malicious code in similar_tahr-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a3c46080d82eaf0779f262f1643b5d4efe8f9cb24823545a6915d09b193810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109506 Malicious code in tasteless_gorilla-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94df7faf0718adb4e8643c9e14605e1cfee08a2677ad655c08d0a8c9ece66ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101792 Malicious code in dsilynor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0566bf601fc1d2587cf3a8813df29d54ba128a1fc7ec62303197ee0a5cd9cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_sheep-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660d1127a5290d9efc1e0aa7a2b01a913864aa0ae94a0530b4f8ef2b4e2752e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93cf57433e730b32691fe1475d712837a2e1bc47f2678cae8b3fe654c7e4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_beaver-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5eda8d27624cb06b61b4cc6f276042a8523ca47146642941e9f5ca204624bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_wildebeest-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfab4421174050c7dedebe393a4943a2157351ced5ff035884d938787cffb300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_clam-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9946ddcf1daf99d7f76b9f9475c66d11959093ffdedf7e6b0af226d07bc6f689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_swallow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175f58655d3a973fc233503c176a1cf0488dac7993d63ebdc288c16e13df0390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mzjbwp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a6d627a5bafc0d4b699167b43fdba134a17920964bdfbc683f11c1525cbee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luccy-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e361e51f1a0cf64c7b5cd0c40449bd026c6e747bd298f00948b46afaf99b3de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_marmoset-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bf56badcb672444f1a43f3f44048e673ee0e80171392a38d4ef19a1e89516e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_anglerfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdd875cabc3b835f00cec4d1fd9a9c4cc99fec7d253778203136235180a947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_antlion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c484e33f1c04b6bf94c9c7884d23332e96c4fc520c2353ff1ecf3af365f82598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_chickadee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7a2d405304ea7a67ed3fd1c3c95ea7a8e1a9059e0c1db48aa8264d0e43f4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b24602d97058514144f5e583fd3d127cc8c1f5308b2d8b36f9295b905867804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...