MAL-2025-107789 Malicious code in recent_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b278ba3e60d2309cdac5436dfee6dea619d6d94505a3299a6befa63ecb6a693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104207 Malicious code in injured_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18543a19a841b67de235a99130912a70d4bbfa5007a68889f6f52ea5f38b7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109963 Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106214 Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102303 Malicious code in exact_grouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e509ef9bd9de28b8f907888b96298f84adc9a7609aa574c27ce053dce9dd4eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_boar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6402d025c9314a86b03889c16d635889a04910cc0c05ed826ec2811ab8fa8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf4bf65a7609df7de6ee186b478fe7c1ac2291fc92c3b889b6ccf78597f1d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foolish_halibut-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efa28fa5e0db7da65873a5ee3ae334ae491da9c8686048f1413ba075c09300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_gecko-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b528ebaf3b67c99f3ef740c0de5c2caa4de404aa765d455610c13308eac40795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8b67ea2e0ad8df25e98a8d72996e9b3eead54d99136cfd532a68387c4cc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a912d1d2923db2e434a34cb4419402c57f98340fd1f30028df92def1774614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_elephant-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a907b0c7625f836c6c9a230f0c7790c9d4c44c81acb4e3b6aeb443bafb6c7401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_fly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0567de772e6a805d5be0668250f3825e4d7b8d487e23bd638ed68b13494c5ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_clam-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9946ddcf1daf99d7f76b9f9475c66d11959093ffdedf7e6b0af226d07bc6f689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_mongoose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3fb131e3b96f9b3b14555688b19ef09fcb59d793d3e03f33895aff2164bd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...