MAL-2025-104735 Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104033 Malicious code in improved_raccoon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d75f2fb600c3bddd35ac80589613b9d4e5a1b90613a82c8d646aa90d2b2df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109018 Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108833 Malicious code in slippery_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007414844c7eef88c92047ff126c3958d35dc43838add3bada994da106c665b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107274 Malicious code in principal_bird-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88604d2fa106ccd79495e0c4b931b725e10edf0faf041699d92e9111fa1135c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108498 Malicious code in select_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f402b27c1c3335b6728803e97ad2509fe39174cad3329be86fb624a56c894587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111308 Malicious code in yngsqu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0bd44447a77bb3f0c62f963b84efaeaa5a5d4ea3d0995622babbdcb4acb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102393 Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99264 Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99682 Malicious code in average_dove-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e260738f2f6d7c191ae985fbea30d313f8cb45330f0bc521ec475c9623cbb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102929 Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104166 Malicious code in individual_worm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3607aa369e0f1a65d93fe72b86cb4b53dd21af11441d403bd27c2da828fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103413 Malicious code in grtris-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d36cc954485a50a989a33c77ef18e241fb88efc8407417504b025f97b0470c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106249 Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107174 Malicious code in ppyzih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315882c10fc6d47fd5c68b8c1fa96c2a44d370bb7ab850afd699fa76b8c9133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101333 Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99128 Malicious code in additional_sloth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abbed89ecd3b20eb1115acc58bce0ec3353226f1d0d9f3f8acae7ebc93715f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105142 Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...