MAL-2025-99074 Malicious code in accepted_jaguar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b299131933774f78c31508b66d1561fb075cda0d16e80fbd2c62998e704a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110310 Malicious code in uxjgea-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ec0a4e66bd98a7927eb98d97f4ce6fe31317157b9cf8945b6dbaad4f7e922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107401 Malicious code in psxtzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8caae3553581408b70a895373aafc4bf8a57bc8cef991927bb5b3d52b4fdb8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105637 Malicious code in marvellous_tahr-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea05c7a1670d609b3f544d7f7ed1e1d67860ed4bc1ba4ac33bc3bacb4cae7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109349 Malicious code in surprising_fox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffb767bd7df5ca4c6f921c108a23d09cfe46bd701d22b10dc8da76c1a6a4cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107313 Malicious code in professional_panda-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a6bc5fe3890ef52256c8cc8b32efef4ddaf36bdf067f82ac8620bf0b702f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110039 Malicious code in uncertain_rooster-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c252404069651b8a11c6d81ee6a5eedcf8d645d5412342fffcbabdecf3a171c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109773 Malicious code in total_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bd140b9eb0d3a7e13dd114dde8f3f2eeb0282c558e975e2558745b975b09e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108401 Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105578 Malicious code in mammoth_orangutan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb2e000ae7fa58c22c32461a279781557748e0aaf10ac77c25ad6a57f06f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106815 Malicious code in othbxw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1078820bc7d1cb44e60edaa67fc7bc9f1ee306ba84504fb2da9ff6b2bbdd414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99813 Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_silverfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c482d95de0d51eac8c9b1f1f294153ce242e4df82e104afde3f3adcfa3b69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_hawk-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a637457eb70e695a6ceb8ca30444129b94b5b0340dda0854cd5b70e9afea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_cockroach-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ff1a425a949f78667fa187e4fd6db04f60ea60feaae2ac4dac277cd2532cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in euvogg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20386d122fa657c80550a8cb02a3a3b7bbe870fb9458a97d6b508039c80d50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_catfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981b419a65046ae3a8cf884d09a41b38963a0cebc2b5eda116b854477f3adbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_baboon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7025ffb83f9e836259f9156d4414cfd16ed52ce205ae647308c172d5952419b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaajpl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20f54cc9d892b8dd21ba229f4c1039bb3e6217c8062afdaac110f601905edf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_eagle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84f094a7533deffaa09c07ae1fa7ca272a8751aadc5ce9fc02af3b6fb47bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...