MAL-2025-107404 Malicious code in psychiatric_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b49fa6893ec55dce7cd936d224cf65d5c01df3870bb5563ef068c5a6dc6b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108948 Malicious code in southern_catshark-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6e1efec17b1222ba2309deadef91f9321c42563237956ee90fb248547c561c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104543 Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105064 Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105930 Malicious code in modern_gorilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aff5fb4fa17e1200b3c6761c181669961d6cf150c4e1f7d32c394cef8471aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107256 Malicious code in prickly_whippet-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd90f250a331a33ba5dff7ecde2167dcb27a6b933ca8470c3548a7b4601e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102916 Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105677 Malicious code in maximum_roadrunner-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b061baac98079f49d88d37e36e474382503acdda97bcdd425eab994134ad42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326c51590a3fd5bfccd2ee50415375553323bc4c339ab0080a82770dc8b0869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101389 Malicious code in developed_tern-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06650f71b5c474ee8723a732025cb0dd8c5c9a54b89105eed7b347ed1f86c7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109893 Malicious code in twctwm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7b9bd8198a3e7f139aefd28f4406ddae364bf91865810bf045abbbb154d60d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103711 Malicious code in hidden_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc28685cd763c2b89cd617f71949bcf9d6100697ec78ba07e7e36cebb580726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_monkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5af2aac50f91fe8f0c4b3c591a42626927b09e1c8ccd5b8a13a089442224a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...