MAL-2025-102245 Malicious code in established_baboon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553d9aa7e9d62bdcda31165100be9e64850a1e0693a4cb782c6f0e29b8a594c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100295 Malicious code in cautious_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec341bdc23893d0145fd171576e280dd83b6bfc5c9743b5e9d90f30f69eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67de227cbb307da471270136a5ef39b99b6985ed3a0eaf608bea2d28e4b432ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_sailfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac91209ab385a0a436e5a849fe1054b5a3923cbb76d2304fcc94d5b748b3089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_pike-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e954f9f8792bc0af4bd27788936ef82f021c9a01b2250580f471e49ee6cdfe74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99360 Malicious code in allied_tarsier-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d864a9937c02a3f4beeb778c2fd5d0590f909ce38f6d6f913b0af12741786c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101984 Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105269 Malicious code in live_beaver-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66354d4ebfae4f0e642cf29bc8b8d8132d40a15a00631240a3cc64f45d293062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103104 Malicious code in genuine_termite-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04111f93e9fb7694d5da401cda547487a517b5211106aadf07822faf81484bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107014 Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110357 Malicious code in various_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e77f9e928223b44c5067f697d0481933b6f66c0a2ba1122f4063cca842c1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107726 Malicious code in rathorn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0a1227e55451ab7e71658749fb57bf705bfa0459b6503e12ada45cb42dd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yfhflc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e8f79b03c2188b26a1c1cedfc9fd94c6d9046d157b15e30bddde99915d134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104241 Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110797 Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106069 Malicious code in myrkkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22591ec59e64b1809c4da6cbc5068fd8d4f078c4d2b69450617aa20194d9ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108825 Malicious code in slimy_crab-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e311dc02414cbc463638ac9368bb7d8e5d285e2b8b9babcd0d847c43461b001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...