MAL-2025-105366 Malicious code in lqnzwf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5f48bf81693ef6960d7953f2d67b141d997a92a4bfb74e02db9a96439d481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108974 Malicious code in spatial_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f4de427f86e1a30e9dd22f0e00d261366da16dd76388437b0ccf4c1c72a4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102894 Malicious code in fragile_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1286dd1a29fdf2886f7d658a5787d4a40da5250745539f7fd9b4a19e52528cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101067 Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99525 Malicious code in applicable_tiglon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21adbd72e2c70d9d6e55e9b81415e15d7fc33fcfd62b9578ec7a2add8e88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108049 Malicious code in rich_butterfly_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e51c673fcb1da2a57af1439094ed66c2e2bf2edda317fe911b8fc25e8008df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99369 Malicious code in alone_wildcat-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a56af3102e021c3186d40b81146df6dba44e0238ba239d4de840ef6da74b00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cfhdod-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050fedfb48e79bfad549b804ae7705b6d4911ef38fc68708f6492693a9573852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aab026914d3ca197611db8483456ebb0b8e3857c677442db9fdefe17cc16bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_chameleon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364834c3ead2cf60154c96a1c6100e37e898623d86c99e2bdc1c376a422be2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_locust-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0278fde85d689a6d3f54cb9ec3c18b8a866a173c6683d8bf88aa889eb4f1b589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c962a78086fe682f81514aa1d539d009f3f1af05a69e25c72e4c4f643e88656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105509 Malicious code in main_koi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c94d80d252925abd33430e73cef47d292d0009597c8bbc24494108792b1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100951 Malicious code in controlled_amphibian-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb058e9d8c0b2c92940f78f3c06adc9e12b1eed607d92a3acdd75a2fb2266efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111044 Malicious code in wtixqr-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64576ef9ec2f2852a9831f9819ba7322617e36002ae531f8fb75f200c7a8295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105944 Malicious code in molecular_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef30a33fdb2af0493c593374a486b7014b5b378edc6bff159df7e90b8d4f24bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110633 Malicious code in voluntary_opossum-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39c6c3a29ca9456ff7a0ceef522f30f16fe5154889a9c35fd9b0c88e13e5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...