MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105347 Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105107 Malicious code in liable_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c00acd570e6ebbbbd1a9e0baf6c3ca0df37959b4a42a4b76512d3aac6e35a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107408 Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109143 Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107355 Malicious code in proper_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c756bf683dee1c6e54a5e8ede3dea5419eff438e3b8e7235696a593b9108426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104087 Malicious code in incredible_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7a3636229571c428e2877e0c9bbce95d0fbc7cc7751cd817f7a8d0770015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102404 Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103359 Malicious code in grdxww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12954d422fc2082858d5e0b104710ebb72604cea8048dac6de690a303bdd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105085 Malicious code in lentengstasiun-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102334 Malicious code in excited_earthworm-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c83cbbf286d8cb6cb478ffe632b4b8803166e5827814c637ec3d192afaed36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hedgehog_pink-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd46d9fd3f16db366a2ec4b658da3daf038d714dcdc7b9660d12a77f59c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107155 Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108597 Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...