MAL-2025-110629 Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100057 Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105084 Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100183 Malicious code in buluxj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2fe3262be99ff88bffcff3d8dc119caea75d7ac57f24a0cdb0fcd19882d9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108611 Malicious code in shared_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b818c1d129ffb3575fe48bb0928c6d33fd6e0ea9269b51b04cca49173b4207fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102942 Malicious code in frittata-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bc6ad4b178e31b952b2af72d550477373129fed670239cc5fb324640961059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106373 Malicious code in normal_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d36f50f656b034c10845d4b61d0cbde99cc706ed6ac8258d2f4547590ce3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107183 Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101192 Malicious code in damaged_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98809bf19c8331cc90a45fcd76372a565219999a59e96c6cba2286234b439ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100856 Malicious code in conscious_felidae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc70fe08494ef4f8f7cff58827b8b9d4cefe05e159a3ff22381ebe3b047e4118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102283 Malicious code in everyday_ox-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af4a51bd3019769bb4bcdea5bafb2c10cbc260bc2588544cece2681e016dee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111246 Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111134 Malicious code in xttrian-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 636aed28ec9713baa956dc68d79b540142181fd5d3aa56139c6b7bd54bdb9c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100936 Malicious code in continued_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c36ac2fd9ba2e0d6ac9057f6198334a07727b45c5a67785cd9a2e016c14dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106855 Malicious code in ouvhww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f261770e31368c9d89a6cba34211d825117a6aa6d4113a00a5a56d4f0f0cea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103925 Malicious code in ideal_wolverine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2fab45ce587cefa8d6f65f177d8a6a92e18ba5316de1c5baa8c9a5f01a010e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_dingo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e634751fc99d26bf7294cac477dc3b25a526942f035daba305a24ddaaaae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_mastodon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23766432618c03d96f4e0617741cd78ac7b03e2b8bc4907f802f432ca784381d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...