MAL-2025-107805 Malicious code in refajt-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e135f4225fb97235433b2e4b8e9734e7d49e9642c8508f502ec7695a89da55ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110015 Malicious code in unable_perch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c752e5981cc6062cd2383a320083a8cb7e5492017daf3f85a66376a6a1b1dec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103858 Malicious code in hushed_cougar-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee38effecb2ea2327fd2aca106710d0c7ca81d1e6212f9a6e69ff03c251e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99080 Malicious code in accepted_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f67b93bb2bb5381129dab354132809949bcaea1a291da318185338a1b133041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_parrotfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbec436b375ac90bc41a917bd74ebbf27c02d28014ef4adfc5d88aa225115c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e527af9369b8dab8ecf209b233439a605081976a23976f1953ef10ed31df2878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_dragonfly-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f320c394edd618b612390c46ab7caf43901e16fc07f46570a1a106833b271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_primate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9314c7f0f676fd8fc58acee63a38cd16826b0e9ef0631d0a6685a79e52b6707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309705c3834f12362fc45725831166f491fb350a9d1dd9a0b0b173c9b6e4d4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100130 Malicious code in broken_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed9be82ddd5f9595d8516a288947880651280e92ba91d9f86eb97b6e853229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101156 Malicious code in curly_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a05c983ce48e6876b9f2414cd3b584d1748e9ea02e94e3f4ad76db144c01ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_cougar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c99a4bca9ad8cab7bae1a0ce792184d40f23e2fdb4df0dba240d2e929df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4781bd90b55ddcccc71a4cfcb1f82f05df6b2b1a931a23dddb4adee17258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104356 Malicious code in internal_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eee9415d26ec8d690acba76a5cefa005ecd5030cf7083053b1a3261edff1f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zcnjao-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ec221421c8cb942064bcf2c6d12e8f4622223ccf8878bc33f1b38bc04ea7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_guppy-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a5b0a8cd9f813087cd9e8031449aadef7179ddc1d28f6bcee1e8521b3bee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111321 Malicious code in young_quelea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcaff5f361112d639cfabc702004487fdde7e37ad3146296992f32ed440c60a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...