MAL-2025-111130 Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106303 Malicious code in nice_salmon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e4ee3a2e7813df9dd34a083caf2bd982f8636e90359a5d7366a358306e67c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103970 Malicious code in immediate_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8ae812b43354a7a41042d52f81becfcfb3a84bb01ebb9cc9a25e5bde916884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101884 Malicious code in eerie_baboon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f00cd57e55bbd7f044e7bc124aa8a8d9c375757004fbb1355a178eafc7149a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100895 Malicious code in constitutional_macaw-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f22edfaa486bda0b75cda60f8a848e59ffe255d2ae587e92a3d6384d25777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110813 Malicious code in well_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d69f8f72973e5cd1b8d4f46ce8a35489e602dea1b1e5602aa2bbd746941b684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101680 Malicious code in diverse_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c663cfdeac71df4bcf0702e8d86bc53eb5c82abf110c5ea6bfb7d0307434d154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101054 Malicious code in creative_koala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6934da3226ec3227fa3248d7f0bd9353fee908e8f5229309ddfa8b57cd245f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101276 Malicious code in defiant_gorilla-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabdc8802ec5096a407e1e55ba6dba4155829fea2dc83c980e4f94cec9a0d55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100944 Malicious code in continuing_otter-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c986a08a4068aaecd1dafa8258c46b7835d238545f115457cbe34609631fbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107990 Malicious code in retired_badger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad172ab6ca54691e135736b857d66dbce91cf04308562fb482e718489a7c8d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102913 Malicious code in free_lemur_white-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b6d27b83d20d88653fb6502f52ce37c244c14ce9ed22ae0a7fa1ec9b96677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_bat_green-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635802c0262fd926fbe3f0cf53b69428f5b22396664f81122abefa95ff458dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103274 Malicious code in gleaming_canid_aqua-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4253a6a1f87ab69701baeef64f200670501c784d87f3150e4bdc48c486ff6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107130 Malicious code in political_catshark_black-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0cc64c2fb374f41f266e299e1de998f0f2a3594fe123b002e977e39906769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_iguana_black-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d68c15c211535bd3241da88d9aa7fd0f030399db6b45fd721cb42dd23b234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_mule_blush-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bdb8835a45afe5c57df2fda73cf51be9d13a90d0ebdc450b4b2802ac68d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110667 Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...