MAL-2025-106038 Malicious code in mushy_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2fa24af69cd434a277b2034a7206f6bb0eccfebff149bb9cf8c628fdb7133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100788 Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110044 Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107682 Malicious code in qylkkc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebab4df0c96b832a8032cb5cd2738ee66f597aeab73158acf440c28f43b2ce9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108518 Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101846 Malicious code in eager_raccoon-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bbd67dca8032b1e3bce5ce8e59b4b51a6c3c4a20b4814eeb2feb611530a901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108984 Malicious code in special_mammal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6d25d5e3a458b3896b66b0b70b98273077f7b310666b3c3cd6a6cc1dd853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105876 Malicious code in mirabalar-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1291cedd60554c08605e9bca0e88de6e1c6221d8082f477a65dc15f4ef4dedd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100645 Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100257 Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109605 Malicious code in thick_wildfowl-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5fa1d159373b8d1fb6b5447e4b2ea5d0ab0f6af1587f380e12f6b79ff6a0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_canidae-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb6fe098cc3649dc79ef512fb922f7ac169039c92717277b9cad3cdef580228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heiyarus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4c597173cf055a1a3e4391429f82b46d83a8748fc406c4cf0b3bb9f7a72960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_kingfisher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65ab669eb0a6b8bd3f4b9f1b41e39da4535d4c5d80cf44a66db0f1203dfc863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_roadrunner-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738508e306962636afff33da47a05ad115b14b6b65fc6dfded003896d6c30fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eaecyp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139cc316254fa9330a1ec9d67f2059f3fed207a10031147ba7e287cdd7f093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109088 Malicious code in statistical_koi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba20b253ff0a04e06f42aa8a0f181b05f8788a8dafc90c1f7ba742538938c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...