MAL-2025-110174 Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107789 Malicious code in recent_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b278ba3e60d2309cdac5436dfee6dea619d6d94505a3299a6befa63ecb6a693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107144 Malicious code in popular_meadowlark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d94753387b06e961c8f03213d1e876caf1ff84f4f6a3e01b3f0ab9be671448c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108423 Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent_duck-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d5ebcd79e0f4456ba0c4f0a31e7ece36dda021043c54fb77e7ac87b181c3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105987 Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111035 Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105311 Malicious code in lonely_kangaroo-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b5d1a71c82196a580b37f132f6aac47c38278e2b60c47fbdd6159a7c941f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104207 Malicious code in injured_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18543a19a841b67de235a99130912a70d4bbfa5007a68889f6f52ea5f38b7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103523 Malicious code in hamburger-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be2670992415031e76004125aa39c7e115e55b727782e5232de11ff9d4b9442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106214 Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109963 Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99044 Malicious code in absolute_ptarmigan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1210982b13b5f0126b62b7c2182866478670c3311ed7245e055af639373dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108174 Malicious code in roasted_vole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bad6fadb0dad678d68a83695fc7b058d8f469ed5e77a6720a455bdc6562aeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105635 Malicious code in marvellous_quelea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c824126baf2d2952afbe28fa6da7b508f2649f1a0e508303e4cb1542702c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102303 Malicious code in exact_grouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e509ef9bd9de28b8f907888b96298f84adc9a7609aa574c27ce053dce9dd4eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106874 Malicious code in overwhelming_starfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bc98e9741ecb54972ef5ce1dff009aa4dad1bc0b60acf56b07d48116b2924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102279 Malicious code in everyday_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b0332515604eb5cfd84dc0c092914cae80dc7efc2f210df479419c3c49dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...