MAL-2025-100352 Malicious code in charming_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e028616da646ddb18ff811b2782de9866779001ba95a77df26681f0b35e1903f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111404 Malicious code in ywavux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628d455c4128ebff46c3dcdafe557455064d6dac81353c65b35b31d3a1dac7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101751 Malicious code in doxcgz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef807f2ac3ce086e855d3a4126c846a8c72ab74d1054c0d053f5a96da3f1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101181 Malicious code in cvrtkr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5806f741947c06a3e49ed0739177e5b45556af6f3ca117171665ea8705f05a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104060 Malicious code in inc_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107678 Malicious code in quprlz-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cc480d164e6f90124cfe73a4d3a552d1252685ba145d0ba4031bf15a46d4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d69f8f72973e5cd1b8d4f46ce8a35489e602dea1b1e5602aa2bbd746941b684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de9e5d7797ca5c0d71d00c7c830c5390ca0d3e592dcb34e9a3c5e03476340a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab2c20b3b590825a6c3ada37ff1f00c62158c78bedb8dd4df7755d1d79a2666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0618af781330fd9f31ed5b65d43162bd09945b95335bdd144baca13234a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107694 Malicious code in radical_mockingbird_orange-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b00cfc7eb67d1ceb6f65beb70c005de30641b03fe434559cfe9de22c54b336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102090 Malicious code in endless_kite_moccasin-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9335ccaab99bd5a2aeb3b80d4498c6511ff25ae0ffbaf971c9b3cb7b2965916c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_lizard_salmon-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438f67656376de01336024500f833edaf005d6e0788cef920ff2dca0d9edbdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9da076f5532fe69db829f65a824513b012640d8c12129b8237d439daf6e8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186dddb47546174c57b15581d42d4f9d94de7d5ecafb222c3dc867d2f1ffa099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582032a100b9b3a1244fc73b35212694cca409388044b576dbc8aaee958922ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21da4d4927246feedcbe4ce27a769b3e2cbe7eb9665dd450d26701c1437995fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100568 Malicious code in civilian_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa9b4c429a6237df5d977be484236ec163ca8e841519ebc001be778b109442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96d55bfa0a7252f225e24b65d55535acfcbedc2c32a42d4d6713274b662b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...