MAL-2025-108527 Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108443 Malicious code in sdsowf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b61ff263b80c858b81a473d25ed3f0d9683252181def915c1f702bd98f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104180 Malicious code in inevitable_kiwi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82828a261f6aaa5f0612bffd4170aa1c4bb5474f24876fcfc984f0b101ec555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111048 Malicious code in xaajpl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20f54cc9d892b8dd21ba229f4c1039bb3e6217c8062afdaac110f601905edf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105774 Malicious code in melodic_galliform-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e3da6be79a610595870fdc55f6b9016b09eef7775cd489223befa071c709b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100063 Malicious code in bottom_lynx-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e658facf4d728f51f605697e8554c9c743a91242c1ceea5c5da23a052c634d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108480 Malicious code in seblakkuah7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368bd047c7b4d0bd324150b587575d54dbdf97af2b79f651259e0f4105ead901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101332 Malicious code in democratic_dormouse-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50981edc6e409bf047e5fcdd1e466017ba048ad5efb7718c8ef9c19360d1f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109856 Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106283 Malicious code in neutral_rattlesnake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8855a3e45559766f9e5cf4a0c65dfc18abe505dd4ea49f233a32fd945f69d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108307 Malicious code in rxlfdd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0044323f46d9734568151a5a4cec8c11a644b84c1615bbd9f7a4de805842a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105946 Malicious code in monetary_anteater-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009144345e8236c56df9c81cb2b11ba971f3ed88d49d74021f26886eca081f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109796 Malicious code in tqkmnh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f7daf9891093e59791356261992d62bab3a9ed1115e4c168665870d470c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dab1dfa837847e64e70050db6ccbcb7fbb18ef63c85c50f8f4a606ace9c87c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cbnkaj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a4aa7909edc8959167b9c92ba2e16a1c411d9e289a2be98d31e95f012616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_moth-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a85b23e7796e71c54205c3033d3881babbcb40ae88957cc47288d65cb6ebd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9100b9459f2da14adb18bcc6f905da9259b97be4f3c1ed8fe124eccd6ae50e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_louse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d3ce0d28dc1fa17d9d4774ee51ea3b8fda1ff352f29dbcbf940efc4297260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...