MAL-2025-112265 Malicious code in robust_ladybug_aquamarine-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e36eb0d3b6bc451ec3283a6fecf4946990d4a9e7d6dd014dc4e2b74d514b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent_xerinae-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2eafaa8b954c74d02382021c67032f359aaf72a752f6b1b249b36cb9922989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110367 Malicious code in vast_boa-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbafc89e67f1da2bb86c02b6f0dd51156891a0c47fa9ef47bef1eb34da5c38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106134 Malicious code in naked_kiwi-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868591139ddc3c4aa159c519908331673c80f60d66cdbf1d34b3eee73a774a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105114 Malicious code in liberal_centipede-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8b1fbf76af9f82e6db8ef99572c1f75fd747fbc6e5613948877bc4ddf60838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105290 Malicious code in ljwyov-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe48b8ec7604784a4496f3a61795413375e7e04e1b01bbe2964c30c6307ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102696 Malicious code in fierce_orca-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cf6e6426698743424ce705f4cd5b49c4807b3a4fb9984d31ea643211285ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103585 Malicious code in handsome_louse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f27eb11d7cb3684d5c570842459cc7c878d831f39c93494a3d3b9cf979dd946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8be4b6f97a4ef1607cf96d2747c2a68dc865c46f44bb335acc5f11450175d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_python-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8668ca3d2fdb8166a44f4c2c17764a82da35e21672d230be7e8dadac1f2877f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6ecee5008aa9537d5bc54ebe94ce63d3fe61dae01dd8becd0992dcc382045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107874 Malicious code in reluctant_krill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a30d54104aa024b63c26c98c8276a005220afd809994fa25ea39d40441a4088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105036 Malicious code in lbwvbl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e9162f560161d54f81c32e9fce47824da30b0321cf49070fdc11ccf12a4520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103820 Malicious code in hraxisys-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3ffa1d448fe520d2bf7cea5b4ad772abaf8152ac844115f2a7e20b235fc67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107427 Malicious code in puny_planarian-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94badb17a5f44ea245f11720ca9e8e1440dc5200a269a7f9be06121bebb56474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...