MAL-2025-102555 Malicious code in famous_angelfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727742c8575f29d6aad87bbdae0ee6e0992c71d3e1f12d865a5e08a3f73aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105595 Malicious code in manual_gull-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b762c251fbe710e2a20f5b7ffc78a3f9be6663db39868877c4691e4952b1c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106404 Malicious code in nuclear_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d955ee922da155c0a31d2503d116e684a9acae05ef5fb979b596f860c3a2102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103980 Malicious code in immyth-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257c82648cc1ae4883958c9cfee33789553b8f673d7e1332ea6d09aaddc9ead8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106249 Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106776 Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107198 Malicious code in pregnant_boar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb9f3a419171d5bcc2d57107751b6295ed2bdbb486d9bd1f1d610922de9ae87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104276 Malicious code in integral_kiwi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5268bc6029666e2df628e0a7d48b7ef01d9e92715e64d27e29fb310b3e0acdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107823 Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108066 Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105628 Malicious code in married_weasel-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629dd5fb11d3ae2f51a4a8f34d6de1110e0d5ebd032196a2002de85a54cff7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101235 Malicious code in deafening_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad0d82095b16c423fcb7763cfab6b9e453cae5eb93b93a2b718eb926de1641c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...