MAL-2025-106278 Malicious code in neutral_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0c4ae60a5c00a5daeb6dff9c0af5d3ae10e46b976e925498dfc79abef63052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107668 Malicious code in quintessential_iguana-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1827c68fa5bbc0ebafe757adc9570320d223b554112d7a534b54bd1a95900225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106774 Malicious code in ordinary_lemming-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eae1c2c04f0ae9b11307e115a73942b919ae5b889e5106e122f4d27dc03b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99813 Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_junglefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d5e107ca24590fb067349f6b178cb6b126f4c2664cd433fdc1dc509b59b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cbnkaj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a4aa7909edc8959167b9c92ba2e16a1c411d9e289a2be98d31e95f012616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_slug-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f71324737edf31dfb8e9541b72aa8c24cc56f4da6c7be4fe448001301f7fa2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in szjsew-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc7c4e8c4da31ffb4cd3984d36fc31366ec91d5ec45803280a9f9129d8e100c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cf962770a6effb1522fdd6823c2ce17a65d9c84839e20934c9a825e35a8c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d432b4f8ce09c7643d27f779aa20322851937fa2eaa60fbe03568d3b254f65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_chickadee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7a2d405304ea7a67ed3fd1c3c95ea7a8e1a9059e0c1db48aa8264d0e43f4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_antelope-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b426fce750c536ee69bdee946aaa4614d18a99444da05771bac270faea67846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102967 Malicious code in fun_canidae-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d6987818a68f5f4aa75270c03e11958e74b3f8d625b33747624d5b5bf16bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102560 Malicious code in fancy_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b325d88c4510ebaa649ad2731472a10bef178b2ccaef15a53ef27a0c9318ec06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106796 Malicious code in original_mackerel-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d336174a622d8414a9e508d8252bf097d43a82d7e4b61990c06075ca8d2a80ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108880 Malicious code in smooth_lamprey-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1232ce7bfe0d9ad3e3f874e9207e4fa87373d11cb9e5330853bfabb6147a8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103611 Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103784 Malicious code in honest_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24440c84c3a3231183885bd638a1a4e4c4c3d9ab64d994b4c56476f092118362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101113 Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...