MAL-2025-112035 Malicious code in international_donkey_tomato-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23347f4a598724598806988ab9b5e1b0e89f8233e1f61fc3b86a5e574665ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de9e5d7797ca5c0d71d00c7c830c5390ca0d3e592dcb34e9a3c5e03476340a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_orca-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e56722fa11c0176bac063c6821db1025e6831a73224d0468b979d50e91123f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101751 Malicious code in doxcgz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef807f2ac3ce086e855d3a4126c846a8c72ab74d1054c0d053f5a96da3f1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111404 Malicious code in ywavux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628d455c4128ebff46c3dcdafe557455064d6dac81353c65b35b31d3a1dac7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99080 Malicious code in accepted_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f67b93bb2bb5381129dab354132809949bcaea1a291da318185338a1b133041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104241 Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101181 Malicious code in cvrtkr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5806f741947c06a3e49ed0739177e5b45556af6f3ca117171665ea8705f05a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aaba5eb1327b851f30f02a0d61a6833aca93c6f445552232d67e9d347794ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nyghqd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d367f0fc4c7f8c56bd3022f849a674177d40311e006712803d09b1753c3fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d69f8f72973e5cd1b8d4f46ce8a35489e602dea1b1e5602aa2bbd746941b684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_seahorse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3198a1b8013590d9df4d76ff549ff203fb595a4065a72ba52ee8a04c56fa14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab2c20b3b590825a6c3ada37ff1f00c62158c78bedb8dd4df7755d1d79a2666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104488 Malicious code in ixqzse-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0050dce5078d69902249455601c14924ac9e53839197e9aaafeeb5669250c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102929 Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111519 Malicious code in zany_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782494d75dc504b09679355e12cca55a4c98a9375eb3f3ae7f362cd79ee1b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_mandrill-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8039af2e9b9aec798f34827d43e9d5d65533c7f459f19f9707324904c94c166a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...