MAL-2025-109612 Malicious code in thirsty_cockroach-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34099b0023fb325cfd56929c830cdb66fbe4980005885019710169022102813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105790 Malicious code in melted_turkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341df1349e97f3b43b74ce5833004f0aeea43aa21152ea5df512022f642001d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100909 Malicious code in contemporary_silverfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c482d95de0d51eac8c9b1f1f294153ce242e4df82e104afde3f3adcfa3b69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106887 Malicious code in pale_wolverine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04314ffe6c86e568cf3a56b169eca545e6a20c77570d54bc34a1b457a74de436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104744 Malicious code in jwuvzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5012e25f3404a133074126802338680faabe84f3c765f2df9d1d08b537ddc7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104237 Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109701 Malicious code in timnwd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6656a0cad632a3576ab4c56a14671f38e9243d157b6cdeb875de93a01b7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111555 Malicious code in zippy_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260609d27cbbe4661b1266f150c7e13df9beeb9972c6e09fc1b5ba15b4ff4928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105107 Malicious code in liable_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c00acd570e6ebbbbd1a9e0baf6c3ca0df37959b4a42a4b76512d3aac6e35a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_wren_orange-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939b0475ee587a62fb7b6cd6dc1a9e30eaf04b689b3982123e024155bffac898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111365 Malicious code in yummy_wallaby_harlequin-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be7489ee1ee32fd742868c82d6ecfc7d2417fc46fdca39854399e0dc97913d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_cuckoo_aquamarine-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a7d92c8b7a98e3de2923f6a0c87c726bd42f4eecaa3a2a00707c1d35343e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99099 Malicious code in active_snake_white-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae6c69d35e3b94661e044ccd5e7f241be1f645d1c13154e747c00ed0ebc7a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110667 Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b58ef088cd3761584c7b9383a2911712f40f743c05c8005c9c398f1c636ade9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empty_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428668c18b042d689b19f2df190b616b054f6ce9b50bb793489c536177416c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...