MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106069 Malicious code in myrkkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22591ec59e64b1809c4da6cbc5068fd8d4f078c4d2b69450617aa20194d9ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105197 Malicious code in linguistic_lungfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da7dd60a7edb7ba90fe8453382d3a7e6ed68b647172e917e5f67298caddffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102883 Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103104 Malicious code in genuine_termite-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04111f93e9fb7694d5da401cda547487a517b5211106aadf07822faf81484bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108825 Malicious code in slimy_crab-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e311dc02414cbc463638ac9368bb7d8e5d285e2b8b9babcd0d847c43461b001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104241 Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110797 Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orjyvs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f403f0fe247f11f9d82743a9d1f56548b52dc90983ded50c04d8f44792821887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_vole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bc6707f444b7bf0aa9a8ae88199e93a46d871db9d0a7d3c4975e6e2af99685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a663d289859382765433d73924d320426c1504607159cd851e275687dbd667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15232f1260c1322ad2079f23f623d6ea45191d2d1347ea1c4388d46d3aca96df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_spoonbill-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f077a1677e9eb34062d00612d6de840de84e135d6bfb226a32a65bb8e6e30e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_leech-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9eebb94601c57a97564f808bee3edb612dab9216d66567853199ce6cc832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keouzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887479560e6d4227fec23022a98a6cacff6f5486c88b94e040bc1d489cc5be9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a8a5cb64325d991b64bca58f60be6859b1a1bd0021c97d9806d690067ff692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...