MAL-2025-108470 Malicious code in seblakkuah32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c257b0b9ff2777a9861b17f3c304ce508fa88cb8131fe7db0ef0b2acda6263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103824 Malicious code in huethea-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2cb3fede06ad21fa6f889823e8628134c66e3c151e8939679331f76c0ab972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102903 Malicious code in frantic_goose-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c673d9fc3d2ed1d254a47bc9cd3acd6ea9ba9fc1450379a713ca7bb6c0218e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100672 Malicious code in colonial_tern-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aab69ff03bd47023ba19bcab7437e5a4f2e2158d9fd25c967fb4a988faa5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103367 Malicious code in great_alpaca-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3e210ef34ed5bcbd03120ee1ecc8eae1419bcbda9b21b5c5e104e14f895f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100101 Malicious code in brief_rook-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b29ba3fd6782dbca537d63045ffa46148bd126a1440683f7fbe7c9f7990c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104663 Malicious code in jolly_ermine-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015f8fcaac1e34174592fc41d1efea8d6a274139d85c7632ad8a77766e7cdba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b0332515604eb5cfd84dc0c092914cae80dc7efc2f210df479419c3c49dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9d50f74e68366232d02d52880ffde7ef821a03f669e20349ff1ae1dfd4a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rlwqqf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee43cc2221f039243836c072a41ba87acc4d1639028c2d1cd05b69c5cd82c2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107785 Malicious code in reasonable_viper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde2d458b62a528988d31dd044fae5050b1f07e85251f34061b6700f5aad3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101761 Malicious code in dramatic_narwhal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da43280a9a0bb085bfd3c950a0857b09b9045b552d7be8aa98f77f5e9eb91f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106213 Malicious code in ncsfhel-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2d2d7b461cd71b4120ccdc8b17d83488cc25782a9684bd9ff46a3cb8e4fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103289 Malicious code in glorious_dragonfly-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f320c394edd618b612390c46ab7caf43901e16fc07f46570a1a106833b271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110378 Malicious code in vczdav-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f35f4d121e936dec7fd585989579d44bba7d6ee4997cc201d3ac3c19c2efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102876 Malicious code in forthcoming_wolf-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85f76a77a7acd1d92ed91772e1be07583ee73593b9f99f537a297f04353babb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99339 Malicious code in ahyrrik-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a390f7d29f636fab638edf71ece64ffdfe25662cbc5a135dae699bddc23593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101650 Malicious code in distinctive_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c676825fe6a5d30e450eb51d4c01d706daeeedc79dca75775763569be7262aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106404 Malicious code in nuclear_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d955ee922da155c0a31d2503d116e684a9acae05ef5fb979b596f860c3a2102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...