MAL-2025-106813 Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108891 Malicious code in social_mule-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf692dfb1b6c534ab3b39ebe4ae5a58b5f1867dd98ee9453507931b099f21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105739 Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107623 Malicious code in quaint_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a945d7d827e8ebc81678674d999f628bd36cb6d94916682e8b14505fe87245e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce_orca-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cf6e6426698743424ce705f4cd5b49c4807b3a4fb9984d31ea643211285ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102097 Malicious code in energetic_gerbil-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182e32ad358de7ca728dcbbc87ef4747f1c67f5c644aa10adbe7fab638fb7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106850 Malicious code in outstanding_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e294690e4a88bf1995aed5cca42cc029ef2fe2cc1dd2ef0ed28816c42a26819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99362 Malicious code in almon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6300d52f87df5278390729d7506faec992fa421162119a400780e91a3493c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104838 Malicious code in knmfux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffd7aff8a3f6eaed02ac0abbeb420d841ca8fbd40dc87c717588dd5d624c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108403 Malicious code in scallop-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8386940850fdeafa9e69bd386e5a2cf1b2dc851a2d15f27a7948de3cab55e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100736 Malicious code in compact_toucan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12a2651ec647c3f27075d15794fbdca18aa23ea1cf40c34dc9f2ba008498eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111117 Malicious code in xenogeneic_tyrannosaurus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17cd2cb39c5c7804e7e8768f784c69d7ef158d724a3d4ce6213914974f094e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108497 Malicious code in secure_urial-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60ffeb1d302b48946ac955b03baa103793864614d9462eeba6ad572e7c3b3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99883 Malicious code in bedgan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826d87285b1a61bb21db7eafe02f4c39cfd958411f1725de7079f7d7cdc5e9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108429 Malicious code in scientific_swallow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38debdb6cd4ea03e108df7494713334252f9cb7b8b6a81f7a99733a96f16035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107995 Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104757 Malicious code in keen_toucan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1524322f1b898e9d2d02899ddfe53b27c0ce3a0e7a6cd4e90f5ff4e3bde652d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...