MAL-2025-102254 Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109650 Malicious code in thtmxy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97839dc7c524e15a22de8f70f1fc5bd3740acecc3d64d739415f8be4bdb69bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105877 Malicious code in miserable_bedbug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcae94e9d95cee1c8be0a14871595caf4ee08694018684d8430a7c7720ca6d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104749 Malicious code in kebab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b440874f0f146045a60ca78a29aa43fc0abfb7e245f0d113151d303670d4c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104279 Malicious code in integral_pinniped-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a244dee13304550e2ab277ab05ad4939fced5ea6252c8aad6e60ce485b1a3817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105908 Malicious code in mjiqrr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be478c0af81568eb07027dd30a2599c6c23267e4c50e18776d8b8268c90547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107654 Malicious code in quickest_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c521c9753c9608583681c58ba5e7c398320a38e3cea3571ac5cec6539e0a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108521 Malicious code in selfish_opossum-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1549e7cbe0b24563d3ca008136bb4aed188db038c2b20889c6b717c4ef55ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104088 Malicious code in incredible_caribou-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78d801db9fdb93c75bc1063949c41711850034defa575aaf4cd9acf1e5cfbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108557 Malicious code in separate_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dbdf7aa1ac16acd38dd4321a2403fb6b76b5f69fea6c5afe7ce6789f32cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_kingfisher_violet-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eabe7b4b5141824214eded38dc9a8020b8361eed477da96992bef7a00b6f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103356 Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc80496fb0d86e86e3a5c1b424bdedf3caa637aff8d9e8267f7d53104f8138d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7136499d62fbd0c06e6e55d82ed588c1951ec3aa674d50fbabb47bbcfbbc549c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7ff424e6c1ee3a1ff49d4f13d40524bbb726870fe34560ada960b265801385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb82d2d630c63ebca212971519eb8eee06988b477ddf20a7dc3fed79df7765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...