MAL-2025-108429 Malicious code in scientific_swallow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38debdb6cd4ea03e108df7494713334252f9cb7b8b6a81f7a99733a96f16035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ejbwdr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994145096f0347db0719ae2ce25c0ec8cd0c63a147d1f18bcb8d8a1eaaa9591c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07bb44b0d84bef1a8a627a1b033ff756332f63a9924327c8836c771f5f6bfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107397 Malicious code in provincial_rattlesnake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9934f39364dc2a0e601b19e7d67628ab9aa1834f26935916d6bdd92bbf380d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_marsupial-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406d8ca0a59370342582845d37a2d3a3ceb71d688d02cd1f33411ceea0cc9381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100807 Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107198 Malicious code in pregnant_boar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb9f3a419171d5bcc2d57107751b6295ed2bdbb486d9bd1f1d610922de9ae87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_bee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b431e3787c2ec4ebd5e85b1d5a9f215f340fb78914398902ef5b3468496e2ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100749 Malicious code in comparative_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5ec6c5eb881745d7824d5d6fe6fb84abb442ad081288b58d45634db040cbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101120 Malicious code in cruel_dormouse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44591ddb82bf3e5dac00255f0af686ea98aa46ffeb42c9e9a4b770ddaca6d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102097 Malicious code in energetic_gerbil-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182e32ad358de7ca728dcbbc87ef4747f1c67f5c644aa10adbe7fab638fb7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105369 Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111117 Malicious code in xenogeneic_tyrannosaurus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17cd2cb39c5c7804e7e8768f784c69d7ef158d724a3d4ce6213914974f094e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104770 Malicious code in kiehtk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb8344570ec93722b755b56602f9cdd1b330268ba05ecd6bbaf51b0ea4ee8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...