MAL-2025-100019 Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107319 Malicious code in profitable_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde26b132991696977fe5a2beb2f7dda02fb106e7fd08d4157047a4508c79a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110171 Malicious code in unpleasant_crane-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3080abb95677c2f2a3da7939194863e7ea331fdc7b4d816ab66c2810497f3b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107248 Malicious code in previous_quokka-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293bc888c42ce59c4c84449f6e5d9113cb62d1b8ad60d7d61f9bc47d85811235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd98c601f0f1f3ec534b094e9102aa145f1041cd87045b74e24921f74507656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110915 Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104541 Malicious code in jealous_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad96bbb5efa066290b226586c0a6656645f6364c2a75c01704f243f076330bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99985 Malicious code in biological_xerinae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a838841b1f6e2f1202ec26084b7df541dc97f3484e835f16aa3f66f6c61c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109269 Malicious code in sudden_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37170afb43af219a73f2e93586c1320fee2c69549b380db4f43060a2e2fb63e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108806 Malicious code in sleepy_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033d640c89638d58f08e044927d44c7078fc57668f828604a9e92a566457811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104839 Malicious code in known_bee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84351eb3a3e6f98bf996b2e5226000833a80a25cb890e1b0fe27a15ac20c1e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vrvhxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2b35c698b9013f76df38ef4a1c5b54c7c6793fdd0b10c1bbf4fc503c907573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1e6ca3789f3fa915453837ed665e3c6f71ebf9e38bcf9f9e3549ba156fda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_raccoon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc7e3860d1433355da3445680d762c080894f3b6b73e9a8bf7c6b4df5def29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_rhinoceros-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ac6ecb4d6e49713bfa58cbac5c05627199152c28b0667059d1299a6065df30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7caa5ac092254a0603516e1e4df414ae5cbc0f2027e7b1b94f243790853fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...