MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109616 Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106269 Malicious code in nervous_raven-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2437a42f763e86a16bc74f752b909ecdca906a2703f2f9795d63d691105701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106481 Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99693 Malicious code in awake_finch-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87499dc07b70cf8fca2811b0617e42245410fdf9a6a1d171216dfb9d2e2daf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107264 Malicious code in prime_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06623d98f800abb7a70b175e619814764b2bd242d10b6866a8eddc553bb656ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103851 Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100392 Malicious code in chosen_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b8d514e5f44a8b5eaf985728d0f80fc28e0f95bd2dbc4e28b15c8327e00260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103943 Malicious code in iemefd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0bcb5008698871d7fda2ef077151d722955c12ce384d67032375d06a21b87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106909 Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109639 Malicious code in thoughtful_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d3ce0d28dc1fa17d9d4774ee51ea3b8fda1ff352f29dbcbf940efc4297260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_slug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12b84c51d469c1341c7af1430f863f4568d5972501a4fad15c820ad8db6fce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imefcf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897418c5ff6964964b9ad021a2d5482309ce3dfe545c42d8b81a5c7b8a2cc543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...