MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100784 Malicious code in complicated_gorilla-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed740e1d2ccaaa6f76e4e85b2ee842d313dd58deb202bbf130d6cf898ac54ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108914 Malicious code in solid_otter-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7d84c5dab6581b2e2c01d219d561573286fd4521550de14977bc72cf6610f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106611 Malicious code in ojihnk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bd1ca7703f361e07b2835fd01939ccb283936281c7a3cf849bb64ef87a3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108050 Malicious code in rich_chipmunk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb6e8c6eab2c2bdc29892c2433fe8286a783b60c8308f03877673c68a4a17a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103738 Malicious code in hljwhb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfe5e9ec4016f18fd6af0a29de472cd365624159544902ee3fdbe93ee48373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105589 Malicious code in managerial_marmot-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1697a5005ecca9763a1652ca4e588f3d31ab296a522fdba13f6ff9030ed4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108898 Malicious code in soivop-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9866bf5d33db6690a3aa08e0ef9d11079ec390c8aa8d80885b036460bec827f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zxozza-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ad14fab8347c3100ffada516ac970e3ff45c6234d5aa16215ee713934ffb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93cf57433e730b32691fe1475d712837a2e1bc47f2678cae8b3fe654c7e4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_goat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d074b4bd00485737ce35206867051ac1d61682b4e5ce9c468f08d4023d31c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_bug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59624d7b06479984b50d5ef39d89ffbcdfedc9aaab1f4865b3a7a28fb7e669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffcf9c5ea97e878588eb71dcaaa50729af45e191254b55fc50831664302f8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oeaaws-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd18844600be94e8ccc6c8f75726c5bb142595b1b5ab90c3250b00985b6db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...