MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108521 Malicious code in selfish_opossum-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1549e7cbe0b24563d3ca008136bb4aed188db038c2b20889c6b717c4ef55ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99085 Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108557 Malicious code in separate_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59dbdf7aa1ac16acd38dd4321a2403fb6b76b5f69fea6c5afe7ce6789f32cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100849 Malicious code in confused_rattlesnake-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bd17e2ede37e2ee499a5d6e89f93b0c6efe2e22e16a6c4edb808432f0956ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105877 Malicious code in miserable_bedbug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcae94e9d95cee1c8be0a14871595caf4ee08694018684d8430a7c7720ca6d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102254 Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104749 Malicious code in kebab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b440874f0f146045a60ca78a29aa43fc0abfb7e245f0d113151d303670d4c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107751 Malicious code in rdlgri-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aba5e00473c09cccf231680ad34e699844d2bc8a2b20f560606ff9f65ddf64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104764 Malicious code in key_elk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9eb61ab410876e4850f4ef38904dc60c9efb93e71bf52448c59d26c3a837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_kingfisher_violet-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eabe7b4b5141824214eded38dc9a8020b8361eed477da96992bef7a00b6f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103356 Malicious code in grateful_lynx_olive-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71e9152fb58b1334ba6c7a2121278977d601333655d5fda36cdc190914f1204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_cobra_emerald-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894b1cd630dd85385aeb6cb89ea36ec3bcbe44597561ad747718279bcfa356d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a98928869f0acf50785e3ed4eff001c5b744a6789c398fe2dc484e8344c9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2593a38308aac6bb156bdabd3c314e4b2369d4034bb4e623b1202547aecc5038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e528a51cd88dc99119dae1d28cab6329fe52413badb040cf8da5b5e28e746bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58472fb5fd6147339517a13e1c426d35ed23680c6d0563aca22fb4aa8ca9940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...