MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108572 Malicious code in severe_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677a12b29e83e16c7ce5b50c57718724a527f88369c308233750d39503e2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107058 Malicious code in petite_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff5472e74c06f71d0dfa0965bd388c1e08f09635cb30eb2461225b274fae99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102048 Malicious code in eligible_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4137d27a492127c60b130fb674bf307e99f8ca994bb49bf5521b422a5e33cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109078 Malicious code in standard_raccoon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7c802fb7de5e6ed0bf4886759f2d01f53bd8c4842aac5dfd825ec088f842a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105374 Malicious code in ltd_guan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172fc147a36d4b0f7e94ae3341d6b9155a40b9e234d83c975e7b12a6ba692b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107882 Malicious code in remarkable_barracuda-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8c5c3c64d21a80bb3b2637dbf27522cd3929c7e65fac6427c9c167ba90a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100574 Malicious code in classic_firefly-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faad2bb4b9865717b149efd985e0e9497f9879b48ecded3533633169f65289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106787 Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111041 Malicious code in wrong_cougar-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c4ffb8d4e012c4ef13198479bdc41f2469b66439e80b51cb6eb4f2aa81b494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103727 Malicious code in hissing_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50f39892e554e62795dd5e4776a7a97b1021dbd8906ade396a47c267b3afb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102847 Malicious code in following_hoverfly-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a55e6168c274b359d2fcfad7153391d0dd242f42c2675a1125cd73db16dfa67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107319 Malicious code in profitable_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde26b132991696977fe5a2beb2f7dda02fb106e7fd08d4157047a4508c79a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_echidna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac83881e6e2cecf2c0fff680d00aa02e5c9534c628c583313fcb726a994132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tortoise-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dba17b5e876c1683166f4fa7b8beb0ae0ba506489c8f2b72d23055744008ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb7e2c7bf43fbe86831ca1e5e5fe1f52bdd5059ad9dad04d562a544f08d97aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_wasp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cc95c9722d0910a8f4e161f7226487bb8f8c433559c79538c101c5da59d4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...