MAL-2025-105757 Malicious code in medical_partridge_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04867bc58acbb95ae23b9df2cc1559d43e5afaaad4ec30e4ade1e7609fd0af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99279 Malicious code in agttrn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25517e2db6c7d9bfdb73c51f57e0c25c6f3a997db815492dacf1320f6b9fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103921 Malicious code in ideal_lamprey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4eda82530b36e251beaa7ec696a4056efe6607cde873e6564b1297035395c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108618 Malicious code in sharp_warbler-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0bb2431c582b61a8dbd7a7a78d40fa7c2ea947fb4dc48802f2ad45429058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107564 Malicious code in qnnkan-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fba9cd6e1f1fb39237b9e93728fd33c0a5c50f3ba8843bb7f8635ffa02f00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105146 Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108625 Malicious code in shiny_cardinal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf7a617064696cd10ee3afdec868164e1a5072204ce4fa9a65124fbff3c1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110613 Malicious code in vodwup-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3c910a1ff9438009e5895d457d67bc9cfe726c319372dc30c7949e8bc6cc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110638 Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19f8545e199b4bbf351320a5bf4241a8a3958a5dd4300533c939788a8eac7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_snipe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fa9df12e7754978a41d9ad102767489663c182d14c3c4fe597968c093f8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_centipede-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf3f13445d0c2f0dae6d3215bd788a121429caad990690b223070bf5f5a82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_sheep-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c2d705a59e289298559f85b71a09ac62aeefdd10100feb6202f17d236ad13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7888de3795f4e95f58e705bbffa1e0908f6131448b02cd7da0e04bed09e72b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bd298c200eb3693c85a6d9d8b768978abd5eb7b81b43cc6c8d99e7eee05432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e7a420bc536cc6c83337b03dc9a57d4ce644d2073f5f112db121766f152f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jczmew-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c40fdd38c5185b00c7a61c02ed38c29036353cad2d286984f0c7d46fb65f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ujjfzs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f818ae4f5720e4181a41d302d556dac4bfa23f1ba57d454f84704273038b5fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...