MAL-2025-104437 Malicious code in isolated_takin-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b72e5aeb2119ba632e84fd044d27a03e166f5c21b996d13f1c4e3fc86b85f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110311 Malicious code in uyeups-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c3e417ccaedd5f433cbc27d968002aaa0a532213f49834d3b1aa199e57c20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102139 Malicious code in envious_chinchilla-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2384ae7cc8a8f3982f45f78445c168cd871500e0f44aac5ac6170ad43bdd3148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109055 Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100055 Malicious code in boring_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a171de469e87f74fdca1673ea5303627ede8c18df5ffc4cf7527d0eb86c7e9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db106d49bc56fafb251fc6990ef708d0878ea1ed46bfccfb1c90d7b08cc3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103855 Malicious code in hushed_aphid-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcfc0860f12b9df2bad079d8ef0a1f650b0f989a59339c99d8ba58913c15dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99664 Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101647 Malicious code in distinct_vulture-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e87242fba20320f0f7ce67c5ab7dfd7e606a924aad22d9386e24988e247f488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102692 Malicious code in fgvmzt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5620ec24441c76e667d17701b2b3e8d75944376272d35ed497dab5eef04b5df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108297 Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99370 Malicious code in alright_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cae8f3e3191b59864b73325e571796670d29562d33e76188f9d2ac94ccf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102386 Malicious code in experienced_reindeer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d046d81659465a75e5ec5aff3cadfbf16e823a64fa219e9de77442b5be87b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_woodpecker-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f592df82d9c0671aead367d26cc922ace2f2719654c3f1d233355473111e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e33728d563750fd64776902d686f1b2048fd96525b876c677bb6ba5ca815f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_eagle-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8fc5f394ab8db5f17ab1629d28ab0bfaa8280b4b7df7a109e2e383fb597886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_puma-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302670e0ad7b0c824b8e48128fa38b950aac409572ff78da6115518496bab57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...