MAL-2025-107904 Malicious code in renewed_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d923cfb6843cb25e14e7e4fe1de0d8a34829ec1c708c3be1d1fc7ed48056f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101074 Malicious code in criminal_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20198f3e645445bd6530f01b0464c6684a020d39e9e7c22c153deccbeb3e22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109554 Malicious code in terrible_gopher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7086203c6ca8e2ae4ddb69c66ed8119158c31377974631e557018fe9e21abc37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99705 Malicious code in aware_quokka-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a3baf055ae5ed3b56df797bcaf5a8e474a62f2dd595365738e85edcb04fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c638876862c334427d3f64865aa2ee48030ae288f8ec21e249576987df7d59ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pancake-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da94a2bd1f19d55d1d73a0e6c9838d352b38aca58bd7bf5382c069675807ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111254 Malicious code in yawning_hawk-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668ba7c8e3fd0183191a1df73d9ffea1642f7e8627673871652415fd7e16732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106402 Malicious code in npznxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34f047449aff215ade8104e53bc84106c744c905749413fe50e65ba0573b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100296 Malicious code in cautious_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f7a4fc23a7bc74e79195da0340945c792a9908f0f0b9e6758e2611a34f79d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104200 Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107751 Malicious code in rdlgri-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aba5e00473c09cccf231680ad34e699844d2bc8a2b20f560606ff9f65ddf64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103573 Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...