MAL-2025-109639 Malicious code in thoughtful_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d3ce0d28dc1fa17d9d4774ee51ea3b8fda1ff352f29dbcbf940efc4297260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101364 Malicious code in desirable_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b089e2e029be884e5e751dfbcd77357b6d666d62170f250b8ea9ba21d805da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103851 Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106909 Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106481 Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104445 Malicious code in iuaynf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e152c256f77f2d22fd69d966ff043d2164314c4e3d9ec236b8ac542efe9ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100392 Malicious code in chosen_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b8d514e5f44a8b5eaf985728d0f80fc28e0f95bd2dbc4e28b15c8327e00260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103790 Malicious code in horizontal_whale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adeda80a4911a42887015cd052e63dee21e747e338f0ddcfd8f344f0cd772d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109616 Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_cuckoo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee93056e5b98657bea920e2753c27ee7b5cc8b5973e080522b36817f509216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ufqjro-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47356b881a8739b28a890728b26b0e06e8d3beba934a5b1f5acfdfd5a6a30e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1633e53e54ef232bcb09c1b2a595f6865162cdaa19aec3cbd4879887c75379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...