MAL-2025-100055 Malicious code in boring_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a171de469e87f74fdca1673ea5303627ede8c18df5ffc4cf7527d0eb86c7e9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105078 Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101024 Malicious code in corresponding_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d2d48662178a018131a31cefc46b0e546e1271faa07ebcb8702cfbeb92bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104375 Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_finch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146da6a60df4ad45504a6fe6973c340935c49b009e576a58fd2c8304ba769b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_grasshopper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88718f14e5ab2c2a45cd4f801d8d7b0ebb7c7b9795270329f4d661bafe31010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101819 Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104155 Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107363 Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106392 Malicious code in notable_monkey_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993621d88ffc331fe24344866b7bd0ea4552437524080249db1d1dea63ecb33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece49acc54591cc591876b5eb4f165589d7bd620fc4453844f146b6ecde6a8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48584cf50182ad96c66f18e94ec765c85e675f8e40dda50f6342a1fe80e4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106133 Malicious code in naked_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5a232efdc9907703ba8aff4a5893d87d7b80b1790bff764c1f9db65c7f76d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105863 Malicious code in ministerial_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384a63c3679545ec9be725acf14fd2bbc211cac368f96e53e1e4050d72099c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111112 Malicious code in xenogeneic_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322664595e9e6132f4a9af4b04aec41f014569403f21af23c0144136021b0c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105887 Malicious code in misleading_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873884fcc2d31ad29c4afda1b05bd01ac4f87f40f413aa00ac64255db58998a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107701 Malicious code in rainy_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21da4d4927246feedcbe4ce27a769b3e2cbe7eb9665dd450d26701c1437995fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...