MAL-2025-100001 Malicious code in blank_tern-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4df4c58f7dd068e3b31f86cdd892beb68ca48cd84bef7abda868bf9a41321f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100807 Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101365 Malicious code in desperate_crocodile-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5f2fcd1f283059f1b0a6184b0e84ec8131bc65b209167f342fec1c6f451972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108898 Malicious code in soivop-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9866bf5d33db6690a3aa08e0ef9d11079ec390c8aa8d80885b036460bec827f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106249 Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111007 Malicious code in worried_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874221abd70e3fd86e14e8c577ef138411147b2efebfbb2705d540129f55abdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107198 Malicious code in pregnant_boar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb9f3a419171d5bcc2d57107751b6295ed2bdbb486d9bd1f1d610922de9ae87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106776 Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101047 Malicious code in cranberry-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d304027659209740433caf4910ee8ca8992e7b482f001e49c6e9496907d7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104770 Malicious code in kiehtk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb8344570ec93722b755b56602f9cdd1b330268ba05ecd6bbaf51b0ea4ee8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102737 Malicious code in firm_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0c061b3177757ec9bd7b0f50a90724761c02c59a457570ebfa8e23e41d1cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108066 Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107823 Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105628 Malicious code in married_weasel-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629dd5fb11d3ae2f51a4a8f34d6de1110e0d5ebd032196a2002de85a54cff7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...