MAL-2025-100414 Malicious code in chvyuw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3874768c5d3f0cf280cad3ac24afe128d1564cc7736cd0b58db4daf179883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102095 Malicious code in endless_squirrel-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b912f50ab34099f95462ee84b3695be5dc18aae25f6276e94d80b2650eb9facc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102320 Malicious code in exceptional_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09213710ae52bf64a66329fe9b2dbb08ae980fcb06b61a89d183b937e4a3389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101196 Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107563 Malicious code in qjakal-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52246c3f0a0c7f1e87e10228214f6f3d9bff4f4d1d0a1f900b5cd56f7ffd4500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107077 Malicious code in pierogi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97585b8dddecd94a7acad910994528de5eb462e213726d68e1a311255cff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102903 Malicious code in frantic_goose-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c673d9fc3d2ed1d254a47bc9cd3acd6ea9ba9fc1450379a713ca7bb6c0218e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100953 Malicious code in controlled_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d24456667593503185972d9ad999531240d5f573dd54caf7601a98d6b78301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102082 Malicious code in enchiladas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a99de59e38a27ac4542fb4dd5ce09199b0c3cb659d2731f8b0e2c7eec3dbe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103289 Malicious code in glorious_dragonfly-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f320c394edd618b612390c46ab7caf43901e16fc07f46570a1a106833b271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broccoli-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54c82c60758d101880d2e742e238fc1147d2cfe8dd5474220a26d91e4462213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively_wallaby-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c985b3b1c61e9352b52396d55c8de54199bd7eadac48f09e5674dc582ab080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_canid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126662e4fbc20e6e6e92cad1c717eb276b6d5951b8c7ea0f8587f42d1a1cb3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_swan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e49cc1aab5f126b00bc464ad90873180f08bf98575d53e0fac7e8895584a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_mastodon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb36596f351aa7ca48a731a32ee2b5c58525294b7ba556710449f3b198ee118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101572 Malicious code in digital_mammal_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d877681bfb774c52646cf1a01ca6e4ad20ab89b1ed589abc48e12c9695a551d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in christian_rooster-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4e34ec50f168c089d07e9acf0791ee304b2fd16dc2a95715634f1eba31655b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3592267c6401f41bbaf0af90a29ee554affe6c811a4cdd6ddad8e5d87ac3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_clam-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0072087c593e96530c36d5f98c339aa95430da38505eb0276e1e75b52179367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...