MAL-2025-108492 Malicious code in secure_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7029ed00173e5ecbc28e1d58e9b47bf523f8c4d829f895cafcb661f9215f99dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107681 Malicious code in qxvfrp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8b788281cd05229ef9f1cf7875ad15609f4d0e03cdba4fb934cb9c11650890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100375 Malicious code in chemical_starfish-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2f608a1a6dc4098859953ee7de075f9dd6c522cfce91a1d6070f9a2a97617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109177 Malicious code in strategic_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd7e3c141e0e9b34d10a3fabc10f7279867f7fcf2dd7f2a87bfa66d7a59390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102744 Malicious code in fish-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46869cde55094b47a8fdbf63532a56f7467f68ad6fc3f2cc07210283b5a365e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105262 Malicious code in literary_vole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bc6707f444b7bf0aa9a8ae88199e93a46d871db9d0a7d3c4975e6e2af99685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104335 Malicious code in interim_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6a07b4d28bebe4d05750dd0ae9621b14dd4f2b1d4ec3c7ba3d12d9eb62987c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103294 Malicious code in golden_armadillo-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae3eb2332af1e6b398bad9dbfa821216ddd3b8b0b80e54a92766d157b6e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102395 Malicious code in experimental_parrot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d382da944d167f9e5c6752efd931a30f5a7c65e8a571473d64ded9825669b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wzkbyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3edfe1862b623962e1753b2a82dd75182c5fe7fab54ce47bc79ae367ae7285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110211 Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110033 Malicious code in unaware_marsupial-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56ba771a6b655535e524d907d3c07c451351f19ce1c30aac97e41cbddd40132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b239c0fcc548b9095ef74c6ae051462c9c045c419e3e8f4dd4e3a58868d02cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yfhflc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e8f79b03c2188b26a1c1cedfc9fd94c6d9046d157b15e30bddde99915d134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104446 Malicious code in iuqkus-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1623b9ee5255209feeeca56153076f86e89988d5ec2bf77f411bc672e7b569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_kite_moccasin-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9335ccaab99bd5a2aeb3b80d4498c6511ff25ae0ffbaf971c9b3cb7b2965916c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101999 Malicious code in eldest_echidna_gold-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a10044d856e5efb683863c70bf85a964bcb2b41c6cafa60439bb36e219bdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_gerbil_pink-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ff98df135efa518d7ce3fef55c546d6dedce20bc79663fbac673148fe6cead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...