MAL-2025-99343 Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102838 Malicious code in flying_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616fe1b68ac5bfc4e12c763622cf9b3cf7126c1055e2e53ef928c9cc7f5d3ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a05c983ce48e6876b9f2414cd3b584d1748e9ea02e94e3f4ad76db144c01ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101634 Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_angelfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17d8f57864937dc62937441357e83cf4e20d5562e9a5c555bc5fedb9e2a734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108401 Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111253 Malicious code in yawning_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20fbfcb3e6084c8c0b97b790ec207735520c7e7378e8f6ad24aba213b19c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100978 Malicious code in convinced_pony-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823ddea31151d642290711207273fc981a5aaa86b2307605a71f053c84af17c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107909 Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108614 Malicious code in sharp_elephant-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0674b6d61fe34a91b46a122f9a9aba6c083020d852794d2ccdc29874147954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102043 Malicious code in elegant_whale-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be195d4d077ada0eea5f55e5f9f721eaf4eb15e0b99c2ca91fa5c6c58e2f788e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101180 Malicious code in cvlkib-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55c08f9ed20c2318051cdc16e76230b89138e870762412e31265f29ff00e912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109721 Malicious code in tkyzou-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20403deacc47904bb63ad86b58f8055929f03aac5a298f713443ea616c09f862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103851 Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100996 Malicious code in cool_loon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d0b033497d43c8446f8a697d320e3c5bc596f1fc79dbf9c74d79ea1e7efed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109965 Malicious code in ultimate_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcea628ea409e46815eb4ff96e7ca73104b1d8759b21d8b59eb5b72b88c13f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...