MAL-2025-111270 Malicious code in yearning_boar-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0188f6151c52a9e60f94d0df26747061be5ef8ee2f6943a72640900bba63d5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104717 Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105958 Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fd7049215d5b5363dc86e53cdcb38041637150ecdda735957fa46158b9037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100833 Malicious code in confident_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5feb7d0f639348b19e402d473f79876f9187bb43abe5bc44dc3ebd5523ae89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108652 Malicious code in shy_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e428647ceb4fd4d99bf1f6ae12a0695219f771b8b2bbbce7b238cde689857fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99088 Malicious code in accurate_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2837e68d7ca36045962730e6f467f3230c18a919672727bd0379e4d9349ff69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104757 Malicious code in keen_toucan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1524322f1b898e9d2d02899ddfe53b27c0ce3a0e7a6cd4e90f5ff4e3bde652d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102842 Malicious code in fmgsra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83fe61d870bb0924ba2dfa3c6a92203e7392adccd6fee1f902a7d895cf7452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_jay_crimson-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15664ce21b62cc46be3aac8a1e311d7f2b3d6a1c7f8dd95794ade951f9bc3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_tahr_tomato-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f898d7f383a09ca82ea7001b3c20dc07e5d73b3079da0928e53b8b879a2c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_heron_azure-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3169282c71af8c8299ae7096486b42def289fa08683c21e90471897c46f09d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102807 Malicious code in fixed_louse_blue-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c031450ce82cbb47514fd3604ddecc59f90a389f473468561be4f53c8463ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103410 Malicious code in growing_kite_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ab0f026222ced597e4fb0c991def80d92ace6f5033c8ed071c203a2b81fda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105744 Malicious code in meaningful_raccoon_sapphire-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dabf1c73e8598dda595c8815c472d1faae883c548f30ab253ed846021f351e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110910 Malicious code in widespread_camel_rose-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ee09477b2d1a847d3156f1d7ff59a21313063be58f5cc91bca09c5896f180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...