MAL-2025-102916 Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15232f1260c1322ad2079f23f623d6ea45191d2d1347ea1c4388d46d3aca96df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a8a5cb64325d991b64bca58f60be6859b1a1bd0021c97d9806d690067ff692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_tick-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a78cddaf9a193d4581d8ae4f94ab148563c482e6d9f247a7c0143cd41b3647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_monkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5af2aac50f91fe8f0c4b3c591a42626927b09e1c8ccd5b8a13a089442224a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326c51590a3fd5bfccd2ee50415375553323bc4c339ab0080a82770dc8b0869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_impala-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1ede95c1e6dc1a3bf63a25a720a5cad5bba329f54c3dd30e16930b505b4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keouzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887479560e6d4227fec23022a98a6cacff6f5486c88b94e040bc1d489cc5be9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142504d60c752a0ed85bd9b58e05e74a2b450d1b6d6d3334b51dd1dfdde0fac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_leech-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9eebb94601c57a97564f808bee3edb612dab9216d66567853199ce6cc832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104543 Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...