MAL-2025-105876 Malicious code in mirabalar-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1291cedd60554c08605e9bca0e88de6e1c6221d8082f477a65dc15f4ef4dedd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99701 Malicious code in aware_donkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c27af153772bb84f749e05af5a75e25ccc5e3c8b296046a0a3c843394a16060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100645 Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102442 Malicious code in extraordinary_shark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5b0bce6174edf07be05cb6c03e0200d469ac30d6d32c9b9ee0c15934e3ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100788 Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108822 Malicious code in slimy_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042ce403a60c619285cbc45c629e247af3cd5f703e9d47c8686906e76c2a898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103601 Malicious code in hard_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f442df4706b8500ed0ee8fdf71771f3223d935a880be320b1c80c2471f0b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100911 Malicious code in contemporary_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f866c76961d18292976b0b02b41145639a1a078e591fd813a68a8ed6c3d7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110044 Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104334 Malicious code in interim_kingfisher-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d7130bc05163c7018e6ebfef577ec308664b8c5eb2f571390d0e6bbb4f0f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108984 Malicious code in special_mammal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b6d25d5e3a458b3896b66b0b70b98273077f7b310666b3c3cd6a6cc1dd853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_roadrunner-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738508e306962636afff33da47a05ad115b14b6b65fc6dfded003896d6c30fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eaecyp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139cc316254fa9330a1ec9d67f2059f3fed207a10031147ba7e287cdd7f093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heiyarus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4c597173cf055a1a3e4391429f82b46d83a8748fc406c4cf0b3bb9f7a72960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_kingfisher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65ab669eb0a6b8bd3f4b9f1b41e39da4535d4c5d80cf44a66db0f1203dfc863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_scallop-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9739ea323487f99668ba950ef761ec6ac4b5cb1f94302a32f287b205b319a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101824 Malicious code in dvehxm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e64a8b409fe4fef1c761c30b71cf8a5fd02d703162eced98525ee2a7259e287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...