MAL-2025-103771 Malicious code in homely_smelt-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49958b233206364c2009da63536f648a2d939214ec931f6216252dddae746411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102364 Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103301 Malicious code in good_raccoon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668aaf95020745a61708a60139a112c2d0b256b1994fc5ecf7fcf2cb7ea14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100579 Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107407 Malicious code in psychological_boar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec7e16970833ce2f0733631a03326474c1f9196b8117793ad7821c3ea5430eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108153 Malicious code in ripe_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d38c12ab0650a5c44aa1807956ab2f2dc0bbb79291b315a229411c3168a8a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102596 Malicious code in fat_swan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a69a24efa7b9fa9f2121b67b1ed22470902d625c5f05e6245eb64f47411980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carsfrot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69dbcc25e94793736b4d945872b6bd7f8c3e0a6fc44077b0bdff9bd9e185391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110039 Malicious code in uncertain_rooster-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c252404069651b8a11c6d81ee6a5eedcf8d645d5412342fffcbabdecf3a171c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105939 Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100744 Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574904246aff8db3b7e83fea561034122eef1f8755d39ea94b230e52e8748390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_crab-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a83d6fd058be7a831335c9a98b6a48bb46d0d444725dc25b93c426998d39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagre-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d657b5080c7c1694415647f79c37b568541f17c622c6a2bfd5c6085d10b66625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9598f6a80648532280d8661db2a7f3e963d405e8ef1f177b2f0ff9db12fa711e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_canidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b855bf1cc9e47fdbd67394a27e169b08d095e13ddb07953aca8a3ef4571165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_viper-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d905a470780bbd194d657c28e493ccced2de24da1960f5573c1db217a36a8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...