MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102737 Malicious code in firm_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0c061b3177757ec9bd7b0f50a90724761c02c59a457570ebfa8e23e41d1cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_pig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b38bd363985d8fedfc0cf99c6b13049e2eb8c6511c1c0379a0763fb0dca7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnrqtl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba31f1ab5a1a3cbf71a970ebf406d268d393f2c6e40660ccfa4938d1f63d6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gpneff-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43b2ba47bf5b77eeb61d3e4a864be862822dd44a75c39b0f45668de31e4f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hgkzrc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba9eda2010c04c284344686ba016c49e8473b45e8d2d98952683c95a7b2b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_nightingale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b87df0a06e957d5a6541618dd77762562aa157f49638a872696e9aaab8f442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187d144403d7d2e7f851d3bfbbea5eb00270eee9ce6014974b60157e24a720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101365 Malicious code in desperate_crocodile-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5f2fcd1f283059f1b0a6184b0e84ec8131bc65b209167f342fec1c6f451972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106249 Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99688 Malicious code in avocado-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e396a988985df485f505fded6802081038b17755ee3d8ee3f90d5abd251450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104276 Malicious code in integral_kiwi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5268bc6029666e2df628e0a7d48b7ef01d9e92715e64d27e29fb310b3e0acdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108066 Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102555 Malicious code in famous_angelfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727742c8575f29d6aad87bbdae0ee6e0992c71d3e1f12d865a5e08a3f73aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99973 Malicious code in biliren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9a2ebbf41608c7579c0c8b07fa6c15953173aee217c31f5aa32f0770cf6c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105868 Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...