MAL-2025-108153 Malicious code in ripe_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d38c12ab0650a5c44aa1807956ab2f2dc0bbb79291b315a229411c3168a8a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102393 Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105987 Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101866 Malicious code in economic_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1518607fab29be8f06e4fbca8304dd31361528975bd2ab54c9c407c68bb03c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b089e2e029be884e5e751dfbcd77357b6d666d62170f250b8ea9ba21d805da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a7b237b2d1de85d94330018f4f47ca0a2cbbadd946480bcb691e12a2760ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_amphibian-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca98c4cb79584c9e33a7c3eac80794d7333477616dd3d2ac900b56c3c8e326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10326049360feb13dccfa1d2231d3f173aae9f2aaf516a35f2fe51e468c3c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_flamingo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1fece569c039165b8ea323f0e946ea9b077b7eb2111bf8d481488a3f0130ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_owl-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9583424f07c1a42e8f2232eff31760f8efba807236bc70e10aef7ca55a08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6a5633a2c1d323838ceb1e9f7a2363631463c1eef040fdfa0e19aef094478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_reptile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e304b5895f3b3b7af1cce8d435cfa105b98666baf0f42fc42c1a3aa34c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105670 Malicious code in mature_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb624f4f0a12de65351358f6f4d64f8b71095c5dab4e0ef831af5b7d84257ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110180 Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105941 Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...