MAL-2025-102726 Malicious code in fine_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1633e53e54ef232bcb09c1b2a595f6865162cdaa19aec3cbd4879887c75379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110804 Malicious code in welcome_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8c52ac1465aaf930b7996fba5b8ff8eecb88864ef39ad704f74fffec3f04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_ermine-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015f8fcaac1e34174592fc41d1efea8d6a274139d85c7632ad8a77766e7cdba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_cow-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d76d43c2d5a3959c52710af82b46168a07361140fbd2e2ececf0682c738f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_swordtail-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964b6dc7e6493439f54d0d3dce50a3dcbeeb198cfc78d4c8dd4e17b3072f7816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109239 Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108478 Malicious code in seblakkuah5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af810eefbb0da231f162e0b37393fefe729b97a20734c2d4a0008464786c0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108236 Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108057 Malicious code in rich_sole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ad0832598cfd4dc9b18b8c1a1c04c24b6ea260152762432b0a3441a04601ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99952 Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104012 Malicious code in impossible_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55839d00fb26799deaeb18f5bd6384e4acae91e06263fc580dce2d9676b513c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107995 Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107167 Malicious code in potential_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a912d1d2923db2e434a34cb4419402c57f98340fd1f30028df92def1774614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102929 Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107331 Malicious code in progressive_pinniped-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3d851c3d27a3e1b275591e8a4c0605f1d68fdbdd8a16a039c312efdadecaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102143 Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101411 Malicious code in devoted_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7da212f120b70944977bd3fa612c8853312ff259a296f1f22dfbcf04fae7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103066 Malicious code in gay_guppy-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de40ff7899ef11b8386da46df7661715833b2ef90d0f76171fb3dfdd3061f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105654 Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...