MAL-2025-106858 Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99658 Malicious code in attractive_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15979efb694fd752e7e4fc39e8a3e34cf784443ee0515d8d8c678a9057e2de12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110772 Malicious code in wealthy_rooster-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415dcf1daf216f68d96def8aff86000d0df6c944256033caf2d081d24532b95c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108470 Malicious code in seblakkuah32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c257b0b9ff2777a9861b17f3c304ce508fa88cb8131fe7db0ef0b2acda6263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107013 Malicious code in peaceful_orangutan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06001a19d1aeffb83c158eff52ae63fe9bf1eaddcba1bc205f4d55c57cfdee99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99339 Malicious code in ahyrrik-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a390f7d29f636fab638edf71ece64ffdfe25662cbc5a135dae699bddc23593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106797 Malicious code in original_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a214f1f8468fa84e0757709c80f1ff527c0fdf1a54b687ffccb8facdb3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111304 Malicious code in yinpeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee78fe30f2ea84bb61ce3fcf8451777df0ac033cc124421cbbc2f4b3295b7866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100672 Malicious code in colonial_tern-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aab69ff03bd47023ba19bcab7437e5a4f2e2158d9fd25c967fb4a988faa5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103367 Malicious code in great_alpaca-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3e210ef34ed5bcbd03120ee1ecc8eae1419bcbda9b21b5c5e104e14f895f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102876 Malicious code in forthcoming_wolf-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85f76a77a7acd1d92ed91772e1be07583ee73593b9f99f537a297f04353babb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106404 Malicious code in nuclear_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d955ee922da155c0a31d2503d116e684a9acae05ef5fb979b596f860c3a2102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wise_grouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5c7f222b23becb656c1d3ac70bf7b1214239fd0fd65662f6faf500b7ea3395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_bonobo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc9dceb57337bf44f18f55b4aa62776f502b1bed60e69794d9ddde4a2a02bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597c9bd769f6eccba409a08b797ab61c8cbcb4d14de029c0d7483a22bc2f48f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_crane-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0add47856efae048cb4814e8f401487c4311dd9418eb5c58208e323b5d09bd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_toucan-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8e8345805fb3490966f569b6ccff3802dfe9cd6848f17b12a2e0a9893e9ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ojihnk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bd1ca7703f361e07b2835fd01939ccb283936281c7a3cf849bb64ef87a3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soxfiv-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf6083bfa07f4cc63ad71844f681eb60da6ea15cdbdd1a6819bb44b6239b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_ant-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c7ac2a9f183e73298cffb0808a4893e1d97dd4a4ac777cf6fb9de9591c45d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...