MAL-2025-109652 Malicious code in thundering_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b575a2169e299894d74bb5624b7d6b2b31171c6598289256ab212e331be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111117 Malicious code in xenogeneic_tyrannosaurus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17cd2cb39c5c7804e7e8768f784c69d7ef158d724a3d4ce6213914974f094e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109432 Malicious code in sympathetic_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc37128344b98273f1b26c2ec4177469369d75da301a610db68fbef80b6680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnrqtl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba31f1ab5a1a3cbf71a970ebf406d268d393f2c6e40660ccfa4938d1f63d6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hjnxmk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8472bb6257ce0ea5b2847af46927d38897493a392d2cdda90b28490f57819b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_swan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666d24576438b25618a690ce6958d4b09faa57735f6322b96417f02844e2bb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4781bd90b55ddcccc71a4cfcb1f82f05df6b2b1a931a23dddb4adee17258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_piranha-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909bf177fefab1801b31f905f89cb87fe0901ceb9aa737f1edbc4c0c950dc419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b38bd363985d8fedfc0cf99c6b13049e2eb8c6511c1c0379a0763fb0dca7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eaecyp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139cc316254fa9330a1ec9d67f2059f3fed207a10031147ba7e287cdd7f093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_rhinoceros-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89dfc58d65e0aba3886757b36ad049896f8df5701c55138247eb93f36c8a75d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yngsqu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0bd44447a77bb3f0c62f963b84efaeaa5a5d4ea3d0995622babbdcb4acb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a614ae491d9f47d2e2633effab16f6cef0e988ff652b93c9cae1960f04471d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cf6803ed4da94fdb0ba12b2fcc80a22deb8cdf804232004dc8ea6d2aa1f971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187d144403d7d2e7f851d3bfbbea5eb00270eee9ce6014974b60157e24a720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...