MAL-2025-106301 Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104425 Malicious code in irrelevant_guan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cca3f86f3e3f5cb01d95c78b014b874b39060b7acbe230205a8a12b9febb606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108648 Malicious code in shugll-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e6f12b28bfaf9eafaa83e32c895b362bfe8e6828485eff37b2928b2dbfb790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102352 Malicious code in exclusive_peafowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52089dc9c17b6585081885cbade286b0c02358a37ad72fffe1bb4a83e976ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_guan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18643953443d5ac78f142ef180904ad8580b8c28b4a772f599b5d369f21fd12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109115 Malicious code in steep_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b828f3ed9bac9f81bd92723896f3a77f55c918d46a4210c119b49f3ed371f80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110604 Malicious code in vocal_clam-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d120e8ffc610c5e56a1a05b144db351d02d97b92676cb8bc1af2e887a86e0c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101145 Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109241 Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100695 Malicious code in combative_ferret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38b83a1790d7cc4719cc6b10c15dc3e95e841cf4cb97cfd1b06a795a8452cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102816 Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103776 Malicious code in hon_silkworm-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03006fd9b338caf9558cfafce97120a720d9482071e99b04acc73475fab6c420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107670 Malicious code in quintessential_ptarmigan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76930c06f021a1567bc966527d595b9a10950688697c345c5c6b75801e1233c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108347 Malicious code in sardine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6e9441ce121d319a0b68d12cb8b8631b5395baded630ff03dacbfe6afc7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hoxljg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d421c6b6a247d3e65b77f0618967f50d9cd3cdbf2826803f86be825d2d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0c4ae60a5c00a5daeb6dff9c0af5d3ae10e46b976e925498dfc79abef63052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_horse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6384851f3d467888c389b90e6762640a9aaa567f5a765a860c6b335c191b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9967e17caf0bcc9f105f85d160bf9a59eb6f7c355b8f72de847092a1e316a39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9100b9459f2da14adb18bcc6f905da9259b97be4f3c1ed8fe124eccd6ae50e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...