MAL-2025-101364 Malicious code in desirable_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b089e2e029be884e5e751dfbcd77357b6d666d62170f250b8ea9ba21d805da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107264 Malicious code in prime_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06623d98f800abb7a70b175e619814764b2bd242d10b6866a8eddc553bb656ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106269 Malicious code in nervous_raven-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2437a42f763e86a16bc74f752b909ecdca906a2703f2f9795d63d691105701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109639 Malicious code in thoughtful_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d3ce0d28dc1fa17d9d4774ee51ea3b8fda1ff352f29dbcbf940efc4297260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103790 Malicious code in horizontal_whale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adeda80a4911a42887015cd052e63dee21e747e338f0ddcfd8f344f0cd772d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100392 Malicious code in chosen_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b8d514e5f44a8b5eaf985728d0f80fc28e0f95bd2dbc4e28b15c8327e00260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109616 Malicious code in thirsty_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a4f014d64a80bd3c82be77bfe492a6216b4ba41c627c3e93571826d5bb75c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104445 Malicious code in iuaynf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e152c256f77f2d22fd69d966ff043d2164314c4e3d9ec236b8ac542efe9ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103943 Malicious code in iemefd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0bcb5008698871d7fda2ef077151d722955c12ce384d67032375d06a21b87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106481 Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ufqjro-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47356b881a8739b28a890728b26b0e06e8d3beba934a5b1f5acfdfd5a6a30e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...