MAL-2025-108051 Malicious code in rich_cicada-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318f3382affa6320ae638b9292d21276b396ca313626751d5f4e26c03472df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100902 Malicious code in contemporary_crow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c28eab4d79a859359e80d3ea9ed219b985a7a8df53e4c9e8b0a3e7a64db005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99948 Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107719 Malicious code in rasdmen-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac51b9211d2e9e5fec111e1f0e1afb14f0aa57fd765e19eec49bfbfd4cab831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110249 Malicious code in useful_pheasant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd37aa7a596afec864bb456cf583942ecd213db8b72ce3c40e79745f00355b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104380 Malicious code in iplude-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1226b940903fadf84485ccdb2fe8e76e28ec4bf5367b3bd87243e4d0fe85fac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111297 Malicious code in yielding_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ed02e0fd53e2f886b942d3458ac4c489d0df4f0cc7150012fb7be00e39db05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110835 Malicious code in whole_centipede-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf3f13445d0c2f0dae6d3215bd788a121429caad990690b223070bf5f5a82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102828 Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108503 Malicious code in selected_lion-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b6c70e814f88ebb124b15663b9abfd718aa33c770cfabc2ca4ec5263696fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109648 Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109621 Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109591 Malicious code in theoretical_sailfish_magenta-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f89df5027241ab09f5916a145239c2d30281065ec6c1df43bb9646150b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_sailfish_peach-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5ef22232ee2070aa8e9a6700377fe6126267b43365418b917c0ad4c944e3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110366 Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108064 Malicious code in ridiculous_crane_copper-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4775dcd937521216de19ca14822c0f9a4450f177a8876c384428c3d0d3c8651f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101064 Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...