MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103790 Malicious code in horizontal_whale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adeda80a4911a42887015cd052e63dee21e747e338f0ddcfd8f344f0cd772d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_tick-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3dd1ef47e6296558a879df676e7b0d12720ecfd41d4a09d2451a53aa749ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_cuckoo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee93056e5b98657bea920e2753c27ee7b5cc8b5973e080522b36817f509216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_slug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12b84c51d469c1341c7af1430f863f4568d5972501a4fad15c820ad8db6fce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e33728d563750fd64776902d686f1b2048fd96525b876c677bb6ba5ca815f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108898 Malicious code in soivop-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9866bf5d33db6690a3aa08e0ef9d11079ec390c8aa8d80885b036460bec827f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1633e53e54ef232bcb09c1b2a595f6865162cdaa19aec3cbd4879887c75379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ufqjro-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47356b881a8739b28a890728b26b0e06e8d3beba934a5b1f5acfdfd5a6a30e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imefcf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897418c5ff6964964b9ad021a2d5482309ce3dfe545c42d8b81a5c7b8a2cc543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106204 Malicious code in natural_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce26dc1be53ed19e9eda525aa76b4217a1685002aa813a6450e22cdbbbb2d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108413 Malicious code in scary_hippopotamus-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8bb3b449a1f7a6936cd1cac95d3ca74dcaca5f17caa04bdaa60f8d8523ef24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...