MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102970 Malicious code in fun_marsupial-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65eed23fe6067b0513432fe05183eee00ed65523849eac0141ce00ed57fa8807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100007 Malicious code in blind_chimpanzee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf0e4fbf0d2ece0ccf90aa0615bd10c16bc132ae751a5549c19ec9df1296d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107702 Malicious code in rainy_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd03c38f59ddb9a9337c24bdf33fecd137dd6fb8f9d4c015a45d1b1d5bbe3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107219 Malicious code in prepared_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa9ffabd7e2debb7bc1c01c8a0bcef19c06375e7600bc679611172ee26f28bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101160 Malicious code in curly_muskox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c34efebd7b09082a21134751cddded7794cabd60725d1a8ebdf80f57d2043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101218 Malicious code in dbqlpn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050b2eb0a100e359a1286c0ef1c9f9767df8ec2843fa875bd6e0526843e8e2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105091 Malicious code in lesser_peafowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b649195355a00a4c4f5dc871b1e8e29a5d3f7fb60c35488c34ee69e7267bab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111301 Malicious code in yielding_roadrunner-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd7018b46bdb796bca285526d3a8612642e364ba0dbc6faaefef3bcb2313860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105323 Malicious code in loose_landfowl-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d73a75cedfb4f588dde2f84d2447df816166adddb27564c453c0ed483533db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eaedcf5b31c227aa8a15fc604cb0cca27c53c0c6a424fbba748da0210b5b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zwctzz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c509eaee301353b4b877e383c2a3a533dc4d74bec7265dd649eb2af326e4ffe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_chicken-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d8ff4e64b37bc323c21278ae37a434c0ec1aa8fe3b6de02b24e3edf67f59be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c962a78086fe682f81514aa1d539d009f3f1af05a69e25c72e4c4f643e88656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df949adaaef8cc053333f175d7aaa38e062ac7760f3400493e96be2957f7eea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ab83ed5ed2d485d9bae44d0a9462b0a5d59e546dc092f0177cb5bfe3fbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_cougar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1254836cd3cda802fdb1c8f725ca2bb53d11e9e5fdaaebe67b6151fc6f62ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...