MAL-2025-104289 Malicious code in integrated_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1eeddae19c82e1ab973cb9b2803ba18922796b7bc00229f31dccc68dac84fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99051 Malicious code in abstract_tern-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86be18c2bd5b1ef516a85120139034c5b9f82a9c14a746e2901150240fe71779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108150 Malicious code in ripe_cricket-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f55e1176610be19126ebe95d0462b4fb3176ac202adfa1c74b726d6f4b14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107679 Malicious code in qvibtt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c80f248938ab7d3a84d6d37cf83c5ee35fb6fcd0b1be158c9cb2738307bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101346 Malicious code in dependent_bug-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a43b140420c9a75e646aab87ce4f14da7007c3e6ce72c53a55e767e35efdf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_hookworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc587257f5a3e6508aef6b53d9dbfd5066ac11d8a193876ecb7cc0014a10a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe48ceff7e562f9ab2e9811fab542d2fb9a4354253ab9c7f73efb491a5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_wolverine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f14aebb547da9f500ddcfec00604108a8dbb3223208d9959643db186c0bf728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105451 Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_canid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3a4d727601ca68aae2c264e3417bc9d1e4a06f89cad01df177092c412f1980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f99f34488f25ca3c79687489f538c769f20a991f209f0e115b4b2856b2cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psxtzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8caae3553581408b70a895373aafc4bf8a57bc8cef991927bb5b3d52b4fdb8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dgjuog-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e588fece1302e6de63bcb0ec684145f069a4e8da451b266454066039ec367c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102743 Malicious code in fiscal_possum_red-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5a215672b60754d3d79cdd790e31ab011c566e06fbee6a2eaf39700c99e09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_whale_silver-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f34fab54fc34a156613197b1cabe9637780df6fa3a09d2a239a75c22b05f787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27a09c6385cc77d7034e3698584efaa0ee8c53b5efed657aa7894469875a312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19dab24abf500efb9b570ac167b87e552f6689de354b713d953236ddb3269025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3450177c56b8b5de160685b90040bda61997cccf6f483958cee59540504b56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110568 Malicious code in visible_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e62af11579e8215d51d2c09b020ec07e13c8ee7b5316763a1f98bfe20250123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b1de63c9450889b13bd268029292a688359474e6198dc9c1f50bfea7990c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...