MAL-2025-99537 Malicious code in arbitrary_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccd8a3817aac8c98068b4f1cc148335844248b96d618603a1a70a8e77b2d402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110249 Malicious code in useful_pheasant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd37aa7a596afec864bb456cf583942ecd213db8b72ce3c40e79745f00355b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99810 Malicious code in basic_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b72d86e745769f971a933cd450afc4e35f6428bb51530e47af7ae1acec087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100328 Malicious code in changing_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bbfd385702dec2da8d41d0fdd75179276a4cf9116a7b162fc824ffec7db43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107650 Malicious code in quickest_baboon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7025ffb83f9e836259f9156d4414cfd16ed52ce205ae647308c172d5952419b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102346 Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105644 Malicious code in marxist_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5d59b36476c4cb83aa6f6f8084735e280ce8d6e477480c82e986debb478001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99996 Malicious code in bizarre_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4b680ada7794a690a49f3398cea1232c2f6b115374d37862c60cf6780350f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105602 Malicious code in many_condor-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac8f309e9bbb835d6ebfab88a6d4192f1c29acbafa386db18dc1a2370cce48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_caribou_tan-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4eaa62300ad006db892512d18c97559d7d866c9d3e1a29809bf0f992bf24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_cuckoo_aquamarine-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a7d92c8b7a98e3de2923f6a0c87c726bd42f4eecaa3a2a00707c1d35343e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_echidna_gold-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a10044d856e5efb683863c70bf85a964bcb2b41c6cafa60439bb36e219bdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110096 Malicious code in unexpected_ostrich_violet-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bc0c8eba8c186b2a6420ede56075d1c62f568cafbf12724c755833c75fc3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110157 Malicious code in unlikely_ant_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158299efc0c802776b901b896025330e38af92c5a0d5673448917329270d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0618722677aea10cea078fcd9a7e1194e231ed6c0f57933dc0fc68fdaf15dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5d719a5f3cffee4920d4a1bf51803ac30551306337043d3a168c0ca302670b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838cc66b325e42d83b36f5f7b1dbc9dd5208cb79b69a303ce3bb074bcb4a6917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7b48e926b38365d6c6ff0fd96906af87135f78b145d5d9ca92f70aec1f52b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...