MAL-2025-108218 Malicious code in round_tapir-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293896c9f57dbdc064be928d909cbc1b6dd91f2d432918b83aa2930abffad116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102139 Malicious code in envious_chinchilla-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2384ae7cc8a8f3982f45f78445c168cd871500e0f44aac5ac6170ad43bdd3148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106619 Malicious code in okay_goose-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9329092cf18a2437da08eca18e140b576ecaa45ee28f9a02b1f933fcd36eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105642 Malicious code in marxist_gull-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0d4540903a4660cebc857810d60c6708432c46390ef1a8a874192b90bddd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106071 Malicious code in mysterious_finch-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b7b7f88255c0f8e12fd054db53b325f01929e898869db28bf037bf24432f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107746 Malicious code in raw_scorpion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd5150e68baf2190448387a714a50aa8ffbaa86ebd5590c183f26e90f2ec2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103855 Malicious code in hushed_aphid-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcfc0860f12b9df2bad079d8ef0a1f650b0f989a59339c99d8ba58913c15dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103801 Malicious code in hostile_koala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b010a88d9ced35704afc5cdee5f9671ecbdd53a2181d1f572614b18354f77840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109603 Malicious code in thick_parrotfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da1add87421be7f0fb2ae36c69f7ab769962aef939ed695024447a04933430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100804 Malicious code in conceptual_dinosaur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf87c7d6a95b07b88626176349c65d66d17744dd8dbc2e9650d9873b9d49069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101774 Malicious code in driving_moth-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d0cc7520f4e031a1417cd1d9f8036fcd88c6aa0df35d9606ab83cab35c58fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_cat-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123377f0f0cc8b522104a441cdda2757c0d1bd031ebbd73db7ee25ebc850cc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_pelican-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6a7c35cc637c13cdb2ba2caef8cdbc21c5e35a329d0ecdd36f17adbdc76863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_wildcat-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a56af3102e021c3186d40b81146df6dba44e0238ba239d4de840ef6da74b00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_hare-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2216a6bd3c3cb02157b3ea350350d0123258cf1ce32f62a1d23e17066069dfac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e0b7d007976ba1bf5fc89cf255b14b5d0a220385b43654fdd0385f04ca4786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106055 Malicious code in mussgdhroom-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5821da305ba2ec9dd9874b134f1403909431416a9d76372e871f9384571da175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...