MAL-2025-101043 Malicious code in courageous_spider-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359563804603c1aa4a59806fa21a454c7d1a6753c3213382cf99e3bbad31e036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107070 Malicious code in phizeiros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee91ecd85660c055c415400a90e24b6819652a4b204029ba22bfdda7f0b208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104038 Malicious code in inadequate_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388615cdd579942d1fbbaf9ec2246b9f21e66c9d77729c8964b369ea2702be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107087 Malicious code in plain_leech-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e2a144ecbeff4e4bbb5f49a096192373b766b123b9288e0ee29785f2f1f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99247 Malicious code in aggregate_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25d15c8aae798fd9403420f7594acb611c704425712fbc543f2e2bdee11f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103293 Malicious code in gnocchi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c643ec953a6d4f794a1a3742bb4e35d441aab63ac80d278102e5807072b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110211 Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101052 Malicious code in cream-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8035936afbcee4f39dd33c01b3880b50d582916ac0c5eda3fbb2468e4d3384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106408 Malicious code in nuclear_yak-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775e28f8f778f6cd0a4eb2a898ff46f7aa662bde4447b3b828f22723cfc8ef19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100263 Malicious code in carbonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ec0654a6c42e716ae44f1a73490a5a459527bb677799604b538e35dc6a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99978 Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107866 Malicious code in religious_gull-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b53c3d712c97925dd3391b4103b63a9d4ead23749db5094baea1400ecb9ffc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107651 Malicious code in quickest_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc5acf7c0553eec4d55e7c2bbae6b2d17652fca986cdde6660c79335939b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107421 Malicious code in puny_crow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c525cd2207a5f9518476597cdea10aa81af9031d5f75c417dfd45d9bc254d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99957 Malicious code in bewildered_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f151b915315a019231ae30513d50f05ba754f16b2401d5c525a646339dc474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dildarae-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64af346f47ad2d6376f77a154047173c2af17b867c52ed4a99ce71a8e38c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e2310300bb3f721ed1be222175ab9a2f6e228573808e8f59e0247a81b95f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_beetle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc90956f95995e1894847973ee34a6b4fcd367254aa1bd04baafb4c62630b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_goat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ef5813db54e8dde6c5af933542000f9863f8625ab61438bb6a94b2b15306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_hamster-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a91980f4961c6f2dd0fdb38a23772ef8a0b6a81c741a627554e5d20dc9e2935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...