MAL-2025-100057 Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104437 Malicious code in isolated_takin-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b72e5aeb2119ba632e84fd044d27a03e166f5c21b996d13f1c4e3fc86b85f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101676 Malicious code in diverse_impala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ded263d14242f26755d7136c35f43314c0cbe75643766bf6f59874e3c070c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100804 Malicious code in conceptual_dinosaur-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf87c7d6a95b07b88626176349c65d66d17744dd8dbc2e9650d9873b9d49069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109603 Malicious code in thick_parrotfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da1add87421be7f0fb2ae36c69f7ab769962aef939ed695024447a04933430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109055 Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99809 Malicious code in basic_marmot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53d5664a8c6cf78a1356b5a065d3d3ef2ca9240d184de6a118f69d457689c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106619 Malicious code in okay_goose-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9329092cf18a2437da08eca18e140b576ecaa45ee28f9a02b1f933fcd36eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100911 Malicious code in contemporary_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f866c76961d18292976b0b02b41145639a1a078e591fd813a68a8ed6c3d7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107681 Malicious code in qxvfrp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8b788281cd05229ef9f1cf7875ad15609f4d0e03cdba4fb934cb9c11650890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99963 Malicious code in bibimbap-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335bcb2d6f38baefc92ccf541da098ce2aa580dbce90f3c9011134527e228877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103801 Malicious code in hostile_koala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b010a88d9ced35704afc5cdee5f9671ecbdd53a2181d1f572614b18354f77840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103855 Malicious code in hushed_aphid-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcfc0860f12b9df2bad079d8ef0a1f650b0f989a59339c99d8ba58913c15dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108297 Malicious code in running_duck-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dd3e433190644e7b11c523027858261603b5efa07710c6a227aeb3e873d6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102943 Malicious code in fritter-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a6f6b72ffdfe433bb4eabafa7269d82f26ee6876884216c0a8b4639d7d669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_eagle-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8fc5f394ab8db5f17ab1629d28ab0bfaa8280b4b7df7a109e2e383fb597886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_puma-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302670e0ad7b0c824b8e48128fa38b950aac409572ff78da6115518496bab57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_ptarmigan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b82e303c6acf22b21bff428cb69360530f70cbedf799e86f85e613e805a3aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...