MAL-2025-104749 Malicious code in kebab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b440874f0f146045a60ca78a29aa43fc0abfb7e245f0d113151d303670d4c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108557 Malicious code in separate_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dbdf7aa1ac16acd38dd4321a2403fb6b76b5f69fea6c5afe7ce6789f32cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104764 Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99085 Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100849 Malicious code in confused_rattlesnake-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bd17e2ede37e2ee499a5d6e89f93b0c6efe2e22e16a6c4edb808432f0956ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107654 Malicious code in quickest_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c521c9753c9608583681c58ba5e7c398320a38e3cea3571ac5cec6539e0a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104088 Malicious code in incredible_caribou-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78d801db9fdb93c75bc1063949c41711850034defa575aaf4cd9acf1e5cfbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106854 Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102254 Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_kingfisher_violet-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eabe7b4b5141824214eded38dc9a8020b8361eed477da96992bef7a00b6f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103356 Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1bf918b108532b85b1f5f944863f15ef20fe15628e76c4232faba252d69dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc80496fb0d86e86e3a5c1b424bdedf3caa637aff8d9e8267f7d53104f8138d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e528a51cd88dc99119dae1d28cab6329fe52413badb040cf8da5b5e28e746bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58472fb5fd6147339517a13e1c426d35ed23680c6d0563aca22fb4aa8ca9940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...